Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
0 votes
0 answers
27 views

"Log in as" when using Salesforce as Identity provider

We currently have a website that handles it's own login with a custom built login experience. We are planning to migrate the login part of this to Salesforce External Identity and experience cloud so ...
0 votes
0 answers
19 views

Is there a simple way to test a SAML JIT handler class?

I'm in the process of configuring Single Sign-On for my org and this org will require JIT user provisioning. I've written a custom SAML JIT handler class to handle that logic and now I want to test ...
0 votes
1 answer
60 views

Marketing Cloud SSO Certificate replacement in Azure

Our MC SSO Certificate is expiring soon. The new one is now available. I've download the metadata xml file, but our IT department are not sure where to replace it in Azure. When they go to SAML ...
1 vote
0 answers
48 views

Passing information from custom SAML JIT handler to error URL

Using SSO in SF, there is an option to insert Apex in the SAML JIT Handler. For each scenario, failure or success, there are fields intended for redirecting the user automatically (Custom Logout URL, ...
  • 995
0 votes
1 answer
50 views

SAML - difference between Identity Type and Identity Location

I am implementing Salesforce as a service provider and I am expected to provide some general guidelines to the application which will be set as the identity provider. There is documentation explaining ...
  • 55
0 votes
0 answers
97 views

How to enable SSO in Experience Cloud for Internal Employee Users using Google Workspace

We are trying to set up Google Workspace as the Identity Provider (IDP) for SSO for internal Salesforce users to log into Experience Cloud. But are running into the generic SSO error: Given an ...
  • 8,658
0 votes
0 answers
27 views

Is Seamless SSO with Salesforce as IdP possible?

We have SSO with multiple partner vendors but still have the situation where logging in to one SSO OAuth app does not get you into the others (though it will also get you into our SF community portal)....
  • 17
0 votes
0 answers
24 views

Salesforce to Salesforce Integration using Canvas App

We are working on requirement where we need to display a Salesforce VF Page in another salesforce instance(Can provide more details on this vf page data but I think its out of the scope for this ...
  • 64
1 vote
1 answer
47 views

Auth Provider with a Google account: redirect the user after they log in [duplicate]

I have setup SSO for an experience cloud site, I selected Google for the SSO and did not specify the authentication URLs and consumer key/secret. The SSO works fine, what I want to do is redirect the ...
  • 11
0 votes
1 answer
64 views

Is Salesforce supporting JIT (just in time provisionning) over OpenID

We want to use OpenId SSO for our Salesforce Community Users provisionning and I was wondering if Salesforce supports JIT (just in time provisionning) over OpenID (contact + account + user creation ...
  • 5
0 votes
0 answers
37 views

Support of Salesforce Mobile App + SSO for Commerce Portal Licenses

We are planning to use Salesforce Commerce Portal licenses for one of the project. We have couple of questions around Commerce Portal License. It would be great, if someone can share their views/...
  • 2,322
0 votes
0 answers
41 views

Standard fields missing in Google to Salesforce user provisioning mapping

We have following setup: Google Workspace as an Identity Provider, Salesforce using Google to SSO Google Workspace as user management system responsible for automatic user provisioning and ...
  • 1,276
0 votes
0 answers
20 views

SSO: authenticate a community licensed user from org A to B not working

I have a problem where I need to authenticate via SSO a community license user in a Salesforce org A to a second Salesforce org B where he has a normal license user. I tried to do as per online ...
  • 1
0 votes
0 answers
118 views

Redirect from SSO is not working

We are using Login.gov as Identity provider and salesforce as service provider. SSO is successful but the redirect is not happening. Below is the error: Refused to send form data to 'https://dos7-dev-...
  • 1
1 vote
0 answers
45 views

Org-to-org: certificate-based authentication when calling REST APIs

I have implemented SSO among two ORGS. I have made a web services class in my service Org. Can I hit that web service from my Identity provider Org using rest callout? I tried it by making a http get ...
0 votes
0 answers
33 views

Users without 'Is Single Sign-On Enabled' checked flag are still able to log in via SSO

After thorough checking of users, I noticed that some of them, despite having no profile or permission set assigned with 'Is Single-Sign-On' flag enabled, are able to log in via SSO. What can be the ...
  • 378
1 vote
1 answer
143 views

Google Workspace SSO-enabled Org Cross-Domain Cookies Error

My Salesforce org has SSO implemented using SAML 2.0 with Google Accounts / Workspace as the Identity Provider (IdP). Everything worked well, until I recently decided to move from Chrome to Brave as ...
0 votes
0 answers
46 views

Integrate Salesforce for multiple clients in a single Webapp to Sync data?

I am currently doing some research on how I can integrate Salesforce in our webapp and I am having trouble finding the appropriate methods or docs. My use case: We have a multi-tenant website where ...
0 votes
0 answers
158 views

SSO SAML Failure: Replay Detected

I'm working on implementing SSO into a digital experience for a client. This is my first SSO implementation and I'm pretty unfamiliar with SAML. I've been developing the JIT (Just-in-Time Provisioning)...
0 votes
0 answers
27 views

Automatic browser login to Salesforce with SSO when user is logged into M365 -AzureAD-?

We would like to have Salesforce detect Azure AD user is logged in on the browser (chromium) and use that for automatic sign in. Possible? Will salesforce look at the logged in windows user and use ...
  • 109
0 votes
1 answer
274 views

Marketing Cloud: how to troubleshoot SSO from Azure AD

I've been trying to set up SSO for Marketing Cloud with Azure AD following this article. When testing the connection the browser displays this error message: "Incoming SAML message is not ...
0 votes
0 answers
145 views

SAML JIT Handler - how to link Contact to User

I have this single sign on configuration: SAML Identity Type: Assertion contains the Federation ID from the User object SAML Identity Location: Identity is in the NameIdentifier element of the ...
  • 830
0 votes
1 answer
112 views

SSO on salesforce only works for certain users

I just started with SSO on salesforce, I made my configuration on one of our sandboxes, the problem is that when I test the SSO connection or when I add a new user on the sandbox, it works well but ...
  • 9
1 vote
1 answer
533 views

Login into Salesforce community from external website using openid connect

I need to create a link/button to login to salesforce community from external web application. My requirement is external web app needs to be the IDP and OpenId connect should be used as provider type....
0 votes
0 answers
52 views

ThirdPartyLinkAccount SOQL Returns 0

Im trying to do a query inside an Apex Class Controller. This is for a login page. integer withCount = [Select count() from ThirdPartyAccountLink where userId =: userList[0].id]; But it always ...
0 votes
0 answers
62 views

Selectively enforce authentication route on a group of users

I have configured a OAuth/OpenID SSO Authentication Provider (OKTA) I would like to prevent login with credentials (Except for Admins) Per the instructions, I should see profile permission "Is ...
0 votes
0 answers
137 views

How do I stop salesforce SSO between communities that use Okta for SSO?

I have a single Salesforce org which has three experience sites? The goal is to use Okta for the user to log into all 3. Business sites must have business users with business contacts. Personal sites ...
1 vote
1 answer
286 views

Single Sign on and API token grant

I am new to Single Sign on configuration on Salesforce and have a use case which I was hoping the community can advise upon. We have a web app outside of Salesforce. We are currently in the process of ...
0 votes
0 answers
79 views

SSO Stops working when enabling Basic Authentication in Customer Community

We have a working SSO (auth provider) Authentication in one of our Customer Communities. We enabled the Basic Authentication in addition to SSO. But while enabling this setting from All Sites > ...
0 votes
0 answers
148 views

SSO blocking Frontdoor URL logins

I'm using the frontdoor URL method to login to multiple orgs. Some have SSO and some don't. The setup works fine for all orgs. Except for one org... This org has SSO enabled and using the frontdoor ...
0 votes
0 answers
150 views

Programmatically retrieve SAML metadata of SF as a service provider

We have 3 full-sync sandboxes + our production org. Every month, the next planned sandbox is refreshed and re-configured. Part of this process is that we enabled SSO on those sandboxes. Once the ...
  • 123
0 votes
1 answer
316 views

Is is possible to use Salesforce as an Identity provider for community license users? [duplicate]

I know Salesforce can work as identity or service provider for internal users (standard Salesforce license) However, is is possible to use Salesforce as Identity Provider to make Salesforce external ...
  • 238
2 votes
0 answers
247 views

How to implement PKCE flow in custom external authentication provider?

Objective is to implement PKCE (proof key for code exchange ) verification as part of SSO with an external identity provider and Salesforce Experience Cloud Tried so far: Setup a custom Auth. ...
  • 3,670
0 votes
0 answers
368 views

Experience Cloud SSO

We are setting up SSO for Experience Cloud with Salesforce as the Service Provider and an external IDP. Everything seems fine until we try to log in. We get the following error in the login history ...
  • 101
1 vote
0 answers
271 views

SSO button does not appear on Salesforce Cloudforce.com login page (with MS Azure AD as Single Sign On authenticator)

Does anyone recognize this situation and know of a possible solution? For my Salesforce login, I want to use Azure AD as a Single Sign On (SSO) provider. On Azure AD I have created the app on Azure ...
0 votes
0 answers
213 views

Can SSO users be directed away from Salesforce login page?

So with SSO you can use Delegated Authentication so that certain profiles have to use SSO and cannot login via login.salesforce.com. Thats fine. But if those SSO-only users do try and login via login....
  • 1,135
0 votes
0 answers
102 views

Update SSO using MetadataService class

I am using below code for updating SAML Identity Type in one of the SSO settings from UserId to FederationId : - MetadataService.MetadataPort service = new MetadataService.MetadataPort(); service....
  • 1,398
1 vote
0 answers
310 views

Is SFDC username considered case sensitive when used as SAML identifier?

In our company we have some customers that login into our Experience Cloud portal using SAML in IDP-initiated mode. In SFDC federation setup, the Name IDentifier found in the SAML assertion will be ...
0 votes
0 answers
118 views

Issues logging into Salesforce 1 app on iOS

We have enabled SSO on a profile in our org and the login to the Salesforce 1 app fails with the following message for the users with the aforementioned profile Server Error : Can't connect to the ...
  • 371
0 votes
0 answers
195 views

Problem Logging In - No_Oauth_State: State was not sent back

I would like to connect GoToApi with Salesforce Org. According to their documentation, I need to go to this URL to get the authorization code: https://api.getgo.com/oauth/v2/authorize?client_id={...
  • 333
0 votes
1 answer
252 views

Will Salesforce passwords still expire during SSO usage?

We just implemented SSO in our SF environment with AD Azure being the identity provider. Therefore, we are no longer using the Salesforce passwords for our users. Do we now need to enable "...
  • 3,794
0 votes
1 answer
252 views

Prevent most users from logging in via non-SSO methods [duplicate]

I would like to block all of our users from logging in except via SSO. However, I still have some cases where only I need to login with un:pw. Is it possible to allow me to bypass the blocked login? ...
0 votes
1 answer
4k views

Why would SSO stop working : malformed_certificate

SSO was working fine, next day it stopped working: (been working for 7+ years) I get this Google Error: That’s an error. Error: malformed_certificate Error while signing data with certificate 7 ...
1 vote
1 answer
347 views

SSO with Azure AD Logout Screen

We are using SSO with Azure AD as the id provider. It is working properly for the login process. But when logging out we go through the process and am going through the process and logged out - but am ...
  • 3,794
2 votes
1 answer
876 views

Can SAML SSO be selectively enforced for a group of users? [duplicate]

I'm trying to reconcile the following recommendation with the fact that there currently seems to be no way to selectively configure SAML SSO by Profile: We don’t recommend enabling SSO for Salesforce ...
1 vote
0 answers
185 views

Single log out for oauth connected app

We’ve followed this guide for single logout (SLO) to call the logout url of our connected app. https://help.salesforce.com/s/articleView?id=sf.connected_app_manage_oauth.htm&type=5 Specifically: “ ...
  • 11
-1 votes
1 answer
260 views

Enable MFA in SSO Sandbox login [closed]

I am trying to enable MFA in SSO sandbox login, but while login into the sandbox it is not asking for any authentication. It is working in the case, when I am login without SSO. Can anyone please help....
-2 votes
1 answer
212 views

Salesforce Single Logout (SLO) configuration with multiple relying party

In one of the Salesforce implementation I am working on, a single Connected App is being used for Single-Sign-On (Community users) for multiple relying parties (using OpenId protocol). SSO is working ...
  • 721
0 votes
0 answers
135 views

Can I Enable Self-Registration Redirection in Conjunction with SSO?

I have a question about Salesforce registration redirection capabilities and I am getting unclear answers from my googlings. Here is the situation: When an anonymous user at our partner site partner....
  • 17
-1 votes
1 answer
47 views

Single Sign on with Azure is not working

We have done SAML 2.0 Federated SSO settings in salesforce sandbox org. Azure team refused to import salesforce.com certificate in azure citing security reasons. I had downloaded metadata and shared ...

1
2 3 4 5
11