Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
1
vote
1answer
19 views

SSO: wiring a launch of an external app to a button

I am using Salesforce as IdP using SAML 2.0. Currently this connected app can be opened through app launcher for single sign on to third party application. However it is also desired to open this ...
0
votes
0answers
29 views

SSO: sending additional data to the Relying Party [duplicate]

I am trying to do SSO with an external website. Is there a way to pass the salesforce object data when doing SSO so that forms on the external website are already prefilled when the page opens up.
0
votes
0answers
19 views

How to revoke IdP session from Salesforce SSO in logging out?

We are using Single-Sign-On from Salesforce. So Salesforce SSO acts as the IdP (Identity Provider) while an external service acts as the SP (Service Provider). When a user successfully logs in in SP ...
0
votes
0answers
24 views

Connected App's “Start URL” -> Using IDP Initiated SSO

I have a connected app between two salesforce orgs, one is IDP and another is SP. My connected app works fine with SSO, i.e. I am able to login to the SP org from the IDP org using this connected app ...
0
votes
0answers
29 views

Marketing cloud and SSO - MFA via Azure

I've done all the steps required in the provided documents here. So when trying to access Marketing cloud through azure apps it works fine, of course it sometimes will prompt for MFA (via azure MFA) ...
0
votes
2answers
31 views

What is the difference between RelayState and redirect_uri?

I believe RelayState is for deep links after authentication and redirect_uri is where you send a user after they are authenticated. I could be wrong through. I have not found any documentation ...
0
votes
0answers
23 views

AuthProviderPluginClass paramether - redirect to sign in / up pages

is there any way to pass some params to AuthProviderPluginClass? I would like redirect to different endpoint (sign up/in) on IP. Or is there other way to achieve that?
2
votes
2answers
97 views

SSO: Azure AD idp + external API Callout from Apex?

Question: When a user is signed into SF with Azure AD identity provider (SSO), we want to send the current identity (in the form of a Saml assertion, bearer token, etc?) along with the external API ...
0
votes
1answer
39 views

Salesforce Marketing Cloud SSO setting with OpenID Connect

I'm trying to set up Marketing cloud Single-sign-on. I'm not allowed to use SAML. I'll need to config the SSO via Open Id Connect. Is there anyone can give me some idea how to do it?
0
votes
1answer
32 views

Lwc NavigationMixin - login Page not able to set startURL

I have a problem with NavigationMixin. I want to navigate to login page, and it does work great. Issue is I am not able to set startURL. Every time it is populated with full URL instead of relative ...
0
votes
1answer
170 views

Access Restricted for API Only Users

When I attempt to login using SSO, I get prompted for two factor authentication and when I enter the 2fa code, I am greeted with a message that says "Access Restricted for API Only Users - You’re ...
0
votes
0answers
46 views

Unable to deleteThirdPartyAccountLink record in RegistrationHandler apex class for SSO

I'm stuck in deleting ThirdPartyAccountLink record in RegistrationHandler apex class for SSO. After contacting salesforce support I got delete access on ThirdPartyAccountLink object. My class is ...
1
vote
0answers
45 views

Authenticate Custom Content Block throws a CORS issue

I'm sitting up the SSO login for my application which is a custom content block by redirecting the user to the link below: var redirectRoute = "https://" + process.env.DEFAULT_BASE_URI + &...
0
votes
0answers
45 views

Required Attributes for SSO [duplicate]

Is there a list of required attributes for Single Sign On. I have a client who is utilizing Shibboleth as the IDP and needs a specific list of attributes expected by Marketing Cloud. I haven't found ...
1
vote
1answer
85 views

Set a Boolean flag in user obj when users register or login via the specific connected app

We have implemented Salesforce SSO, which allows B2C customers to self-register or login via the SSO endpoint (authenticating via a predefined Connected App). The requirement is - when a user register ...
0
votes
1answer
72 views

How to add a RelayState parameter to SSO setup?

I have an existing SSO setup using ADFS as the identity provider. I wish to add a RelayState parameter to the end of the Login URL https://help.salesforce.com/articleView?id=000331033&type=1&...
0
votes
0answers
29 views

How to determine service provider connected app in Login page?

I have a setup where Salesforce is the Identity provider and the authorization flow is service-provider initiated (where the service provider supports oAuth, not SAML). The login page is reached and ...
0
votes
0answers
34 views

SSO into Community via OpenID Connect

I am trying to login to Community via OpenID Connect Below are the steps, I've tried so far. Created Auth. Provider Created Connected App Configured Community to show Auth Provider as login method. ...
3
votes
0answers
97 views

Including SSO in a managed package

We have a Salesforce Managed Package, and we'd like to use it to provide access to a non-Salesforce service (in this case Tableau). The ISVForce Guide indicates that you can package SAML SSO config in ...
0
votes
0answers
31 views

ID Token from OpenId Connect

We are using OpenId Connect for SSO into a Community with an external Identity Provider. It is easy to get the Access Token returned via AuthToken.getAccessToken. Is there any way get the ID Token (...
0
votes
0answers
47 views

SSO Custom Button From VisualForce

I have a custom login page created in visualforce for a community. I need to implement a button that will direct to SSO, I am currently just redirecting to the SSO login url from the Single-Sign-On ...
0
votes
0answers
66 views

AuthToken.getAccessToken()'s return value is NULL

Implementing SSO with Okta and need to access to retrieve Okta's userinfo with access token.Tried the following code to retrieve access token in Auth.RegistrationHandler's createUser method but the ...
1
vote
1answer
80 views

What is the difference between delegated authentication and single sign-on (SSO)? [duplicate]

On the exam guide for Salesforce Certified Identity and Access Management Designer, it says that you should be able to Describe the configuration requirements of delegated authentication in ...
0
votes
0answers
32 views

OAuth 2.0 SAML Bearer Assertion Flow -

We have a scenario where we need an application (external to SF) authenticate to Salesforce via IDP. We have SSO flow set up, where Okta is the Identity Provider and Salesforce as SP. I was hoping ...
0
votes
0answers
44 views

SSO based on email address in a refreshed sandbox

We've set up SSO through My Domain and it matches user email. So when they attempt to log in through My Domain, as long as their SSO email match the SF email - they're in. If I check "prevent login ...
0
votes
0answers
28 views

Load denied by X-Frame-Options Customer Community

I am embedding a Visualforce page as a iframe inside a Lightning component. When I log in as a customer community user using SSO, I get the "Load denied by X-Frame-Options" error. However, if I log in ...
0
votes
1answer
44 views

Create own social login page with lightning component

I did Auth Provider and built the community with experience builder. Login page has username, password and social sign on button with experience builder page but I need to change the layout out and ...
0
votes
2answers
52 views

Using Google as IdP in sandbox - how does it know what user to login to? [closed]

Question: How does a sandbox knows to which user to login? Background: I have enabled SSO on a sandbox in order to test before going to produciton. Our IdP is Google. I have created a test user in ...
0
votes
1answer
41 views

“Insufficient Privileges error” while implementing sso (single sign-on) between multiple orgs

I am implementing sso for my client, but I am getting the insufficient privileges error repeatedly while clicking on the SSO name while logging in Service provider (or by clicking the "IdP-Initiated ...
1
vote
0answers
33 views

Dynamically Pass attributes to SAML from Lightning Component/VF Page [duplicate]

I have a use case where a user clicks the SSO link on a case record or account record and it should pass some Case/Account fields based on the current record information to the SAML response. In other ...
0
votes
0answers
13 views

How to Login using Salesforce Customer community user credentials from Third Party Mobile Application [duplicate]

Our Client have Salesforce Customer Community License and have customer community in place. They have developed Third Party mobile application (Not SalesforceA) for Android and Apple devices. ...
2
votes
1answer
367 views

OAuth+SSO login works with Data Loader GUI but not Data Loader CLI

GUI On my Windows machine, I can login with GUI Data Loader 44.0.0 without providing a username and password, by choosing "OAuth" and "Production" environment and clicking "...
0
votes
1answer
80 views

How to authorise a SSO org in sfdx?

You can authorise an org in sfdx via this command sfdx force:auth:web:login -r https://customer1customdomain.lightning.force.com -a customer1 When the org is SSO-enabled, I can only login by ...
1
vote
0answers
29 views

Send custom data when Salesforce is a SAML SSO identity provider [duplicate]

We configured Salesforce as an Identity Provider for an External App. We want to be able to make Idp-Initiated SSO and send custom attributes with the SAML Message, for example the Case or Account ID ...
1
vote
0answers
32 views

Community user is not getting redirected to Start URL configured in Connected App for SAML

We are trying to implement SSO using the Salesforce Community to an external PHP site. So, the Salesforce community should be able to login to that external site using community credentials. So far we ...
0
votes
0answers
15 views

SSO Service Down when pulling code via Haoide

guys, any idea about this error? I cannot pull code from Salesforce now. Thanks!
0
votes
0answers
27 views

SSO - Platform-licensed vs community users

Salesforce is using SSO with PING as Identity management where salesforce is SP and PING is Idp. There is a scenario where one user has salesforce platform license and same user is also a customer ...
0
votes
0answers
39 views

Salesforce SSO delegated authentication [duplicate]

I am new to Salesforce and trying to understand the concept of Delegated Gateway URL of Single Sign On. I understand that Salesforce will enable this feature after submitting the case and I have to ...
0
votes
0answers
28 views

SSO for External OAuth 2.0 Provider - NO_ACCESS User+was+a+portal+user

I configured Single-Sign-On for my application through OAuth 2.0. Plugin class works well, salesforce gets all required infromation. RegistrationHandler -> createUser is perfomed and a new user is ...
0
votes
1answer
32 views

Get Session Information in JIT Handler

Use Case: There is a Community that the User has to login to using SSO. A custom SAML JITHandler is configured for the same to assign a PermissionSet to the User. We now need to make this ...
3
votes
0answers
34 views

parameters of createUser method in samlJitHandler [duplicate]

the syntax of createUser method in samlJitHandler class is createUser(Id samlSsoProviderId, Id communityId, Id portalId,String federationIdentifier, Map<String, String> ...
1
vote
0answers
79 views

JIT provisioning for Person accounts

I am looking to enable user provisioning over SAML and was going through documentation https://developer.salesforce.com/blogs/developer-relations/2014/06/how-to-provision-salesforce-communities-users....
1
vote
1answer
94 views

Salesforce internal server error - SSO through OAuth 2.0 external provider

I am configuring Single Sign On for my application through OAuth 2.0 server. I used the next recommendations: https://help.salesforce.com/articleView?id=sso_provider_plugin_custom.htm&type=5#...
0
votes
0answers
34 views

Restrict SSO to specific users [duplicate]

I've implemented SSO with Salesforce using ADFS. Currently all users can login to Salesforce via SSO. I'd like to limit SSO to a subset of users based on user groups defined in AD. How can this be ...
1
vote
0answers
40 views

Salesforce iOS Remote Hybrid SDK works incorrect with SSO

We're using Salesforce iOS Remote Hybrid SDK in our app, version 7.1.2, that is shared for different clients, and it works ok with simple oAuth2 flow. However, started from Spring 2020 release, it's ...
1
vote
1answer
43 views

Access by same Community user to Two Communities

I have two communities and a user (profile) which has access to both communities. I would like to allow them to login once and when they want to transfer to the other community just click a link or a ...
1
vote
1answer
142 views

Salesforce Marketing Cloud Single Sign On Error - SAML SSO Error

We are trying to configure Single Sign On with our Salesforce Marketing Cloud Instance. SFMC is our SP while Microsoft Azure is our IdP. We have been following this link to setup the Single Sign On ...
1
vote
1answer
46 views

How Do I Enable SAML IdP in a Customer Community?

Our Client need to setup an SSO for their customers from the Salesforce Customer Community portal into another web application using SAML. We are familiar with enabling Salesforce as an IdP for ...
1
vote
1answer
105 views

SSO and User Provisioning From External WebApp into Salesforce Community

Scenario - customer is logged into our web app, they click on create a ticket and are redirected to the salesforce community page as a user in salesforce with the same email as the web app, want to ...
4
votes
1answer
85 views

Redirecting to MyDomain URL

We set up SSO with Auth.Provider in Salesforce. We deployed My Domain and linked the auth provider to it. When a user navigates to the My Domain URL, they are automatically redirected to the auth ...

1
2 3 4 5
10