Questions tagged [single-sign-on]
Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.
565
questions
0
votes
0
answers
26
views
Using same certificates in production and sandbox for SSO(SAML)
We're using custom domains in sandbox for my communities(2) and performing SSO between them, where one community is acting as an identity provider(IdP) and other as service provider(SP)
To enable SSO ...
- 493
0
votes
0
answers
28
views
SSO using SAML - Error using Heroku App setting Up SAML
I am trying to test out by setting up SSO in my trailhead org. Following these steps - https://help.salesforce.com/s/articleView?id=sf.sso_service_provider_configuration.htm&type=5
I setup SSO ...
- 4,751
0
votes
1
answer
37
views
Can different single sign on be configured for internal org and experience cloud portal?
Can different single sign on authentication providers be configured for internal users and experience cloud portal users?
I assume we can have multiple SAML SSO authentication providers setup but how ...
- 16k
0
votes
0
answers
39
views
SSO and CA-signed certificates
We are trying to set up SSO with Okta for our prod salesforce instance.
And one of the compliance requirements from our IT/security department is to use only CA-signed certificates, i.e. self-signed ...
- 2,990
0
votes
0
answers
37
views
Salesforce MobileSDK app login via SAML SSO still required to perform Salesforce MFA
My org has an SAML 2.0 Single Sign-On enabled with:
Azure AD:
SAML Identity Type: Federation ID
SAML Identity Location: Subject
Service Provider Initiated Request Binding: HTTP Redirect
Use ...
0
votes
0
answers
71
views
Sending a multi-valued attribute in SAML assertion
I made connected App in Sandbox to log in AWS using SSO from Salesforce
(SFDC-identity Provider, AWS - ServiceProvider)
we set up NAME ID Format (urn:oasis:names:tc:SAML:2.0:nameid-format:persistent) ...
- 1
0
votes
0
answers
43
views
SSO without SAML or OpenID Connect
What are the other options can we use for SSO with Salesforce as the identity provider if the other party does not support SAML or OpenID Connect?
Is it necessary to use a Custom Bridge that can ...
0
votes
0
answers
39
views
Community - Allowing Direct Login but Preferring SSO
My Community uses a homegrown system as its IdP. The identity portion runs on Okta. When the user clicks a link in the homegrown system, they are brought to the Community and logged in using SSO.
We ...
- 488
0
votes
0
answers
79
views
SSO between Experience Cloud and external E-commerce site
The client needs Is the following:
From the e-commerce (external hosted) when they want to register,they are redirected to the salesforce community Page where they can log-in or register. After they ...
0
votes
0
answers
39
views
Log in and Sign Up to a Salesforce Community from an External System
I have a scenario where the customer can sign up/login from an external ecommerce system to a salesforce community with SSO and land on the community.
How can i achieve this? Salesforce as Identity ...
0
votes
0
answers
69
views
Single Logout (SLO) via OpenID Connect
We use an external identity provider to verify credentials with SSO via OpenID Connect to Salesforce Experience Cloud as the Relying Party. After the the person logs out from Site A, he should be ...
- 17
-3
votes
1
answer
62
views
Login to Salesforce from .NET [closed]
I tried to login to as salesforce community user from a .NET application "https://perfectvisionpoe--pvccdevorg.sandbox.my.salesforce.com/services/Soap/c/55.0/_____" API callout but I am able ...
- 3,817
0
votes
0
answers
65
views
How to get the service provider Id from a connected app of SSO
We have service provider id in Salesforce which looks something like this - '0sp3I0000004CN4'
This is used in the IdP-Initiated Login URL.
Here is the documentation for that: IdP-Initiated Login URL
...
- 138
0
votes
0
answers
31
views
Can SSO be configured via API between Salesforce and Okta?
I would like to use Okta as an IdP.
Now, imagine I need to configure 10 Okta instances with 10 Salesforce instances.
Is there any way I can automate the process of setting up SSO via API for each of ...
- 205
0
votes
0
answers
42
views
If we enforce SSO to Salesforce and it breaks how do we log in as an admin to fix? [duplicate]
We have Azure AD to Salesforce SSO. We don't want to allow the option for SSO users to log in directly.
If we enforce SSO to Salesforce and it breaks how do we log in as an admin to fix?
For example, ...
- 109
1
vote
1
answer
474
views
SSO with Communities: Invalid portal id
I am implementing single sign on with my customer, salesforce acting as service provider.
We already tested the single sign on and it works for us with the Salesforce organization. We can log into the ...
- 96
0
votes
0
answers
408
views
"The Single Sign-On Gateway Url is invalid" error when making API calls
I'm testing API calls to Salesforce via Connected Apps in an environment where SSO is enforced via Permission sets. For the SSO I'm federating using Facebook.
The communication works fine without SSO (...
- 1
0
votes
1
answer
135
views
Problem with Salesforce as Service Provider (SP) and other system as Identity Provider (.PEM certificate)
I am trying to implement single sign on (SSO) with my client, using SAML 2.0.
My client has an application in "Outsystems", "Outsystems" will act as Identity Provider (IdP) and ...
- 96
-1
votes
1
answer
705
views
Populating a Federation ID when implementing SSO
We are about to implement SSO, with Azure being the Identity Provider.
If we use Federation ID to be the unique identifier for SSO how will we populate the Federation ID field in Salesforce ? Is it up ...
- 3,856
2
votes
1
answer
343
views
Why doesn't SSO between my Digital Experience sites work?
The steps here Configure SAML SSO Between Salesforce Orgs or Experience Cloud Sites are detailed and clear. But having gone through those, I'm still seeing the the separate logins rather than the ...
- 135k
0
votes
0
answers
149
views
How to launch IDP-initiated SSO for a SAML-enabled Connected App?
I have a SAML-enabled connected app configured for a 3rd party service provider to be used by community users (SF is IdP).
However, I can't expose SF's native app launcher as this community is under ...
- 2,614
3
votes
0
answers
112
views
Is single sign-on for self-registering Digital Experience users possible?
We have a Digital Experience that includes self-registration logic that, when completed correctly, goes ahead and creates the necessary Contact and User resulting in the welcome email being sent. The ...
- 135k
-1
votes
1
answer
159
views
SSO login to shared account
sso enabled in org and everything works fine. we have new requirement like 2 different users want to login with same account I mean user x and user y wants to login salesforce with same user called xy ...
- 537
0
votes
0
answers
107
views
Retrieving User-Level OKTA Tokens for Apex Callouts
I have users who log into Salesforce with OKTA SSO.
I want to use that same session/token to then make requests from Apex to cloud services with that user's authorization.
The services that receive ...
- 2,039
0
votes
0
answers
25
views
Help with SamlJit Handler regarding querying total number of profile license
We activated SSO in Salesforce and Azure, the users that will login to the community portal should have the license Salesforce Platform.
How can I query this profile license in the SamlJit Handler and ...
- 1
0
votes
0
answers
206
views
How to obtain access token after SSO when Salesforce is a service provider?
Our users log into Salesforce using the Single Sign-On provided by our Employer. Here Salesforce is a service prover and the Employer's system is the identity provider. The SSO is configured based on ...
- 453
2
votes
1
answer
3k
views
Will "Disable login with Salesforce credentials" lock-out Administrators as well?
We have Okta setup as a SSO provider for Salesforce. We want to restrict all non-Administrators from logging in with their Salesforce Username and Password. However, we still want Administrators to be ...
- 4,947
-1
votes
1
answer
768
views
Cannot login to new Sandbox
We have a new Salesforce org. SSO enabled for user login in Production.
I created a new sandbox (Developer Pro) from Production.
After Sandbox was created, I got an email Sandbox: xxx is ready to use
...
- 845
-1
votes
1
answer
186
views
MFA and SSO issue
we have had SSO setup for Salesforce a while now and recently had to setup MFA as it was being auto enabled by Salesforce, but now the users are asked to download the authenticator app, Is there ...
- 1
0
votes
0
answers
101
views
Salesforce - DUO SAML SSO integration
I am trying to setup login using DUO in my salesforce and followed this article to set up and finally I reached to this point . In order to do the POC i created one trial account in DUO and trying to ...
- 95
0
votes
0
answers
46
views
"Log in as" when using Salesforce as Identity provider
We currently have a website that handles it's own login with a custom built login experience. We are planning to migrate the login part of this to Salesforce External Identity and experience cloud so ...
0
votes
0
answers
308
views
Is there a simple way to test a SAML JIT handler class?
I'm in the process of configuring Single Sign-On for my org and this org will require JIT user provisioning. I've written a custom SAML JIT handler class to handle that logic and now I want to test ...
- 145
1
vote
0
answers
267
views
Passing information from custom SAML JIT handler to error URL
Using SSO in SF, there is an option to insert Apex in the SAML JIT Handler.
For each scenario, failure or success, there are fields intended for redirecting the user automatically (Custom Logout URL, ...
- 1,147
1
vote
1
answer
887
views
SAML - difference between Identity Type and Identity Location
I am implementing Salesforce as a service provider and I am expected to provide some general guidelines to the application which will be set as the identity provider.
There is documentation explaining ...
- 186
0
votes
0
answers
352
views
How to enable SSO in Experience Cloud for Internal Employee Users using Google Workspace
We are trying to set up Google Workspace as the Identity Provider (IDP) for SSO for internal Salesforce users to log into Experience Cloud.
But are running into the generic SSO error:
Given an ...
- 9,187
0
votes
0
answers
43
views
Is Seamless SSO with Salesforce as IdP possible?
We have SSO with multiple partner vendors but still have the situation where logging in to one SSO OAuth app does not get you into the others (though it will also get you into our SF community portal)....
- 17
0
votes
0
answers
58
views
Salesforce to Salesforce Integration using Canvas App
We are working on requirement where we need to display a Salesforce VF Page in another salesforce instance(Can provide more details on this vf page data but I think its out of the scope for this ...
- 74
1
vote
1
answer
340
views
Auth Provider with a Google account: redirect the user after they log in [duplicate]
I have setup SSO for an experience cloud site, I selected Google for the SSO and did not specify the authentication URLs and consumer key/secret.
The SSO works fine, what I want to do is redirect the ...
- 11
0
votes
1
answer
217
views
Is Salesforce supporting JIT (just in time provisionning) over OpenID
We want to use OpenId SSO for our Salesforce Community Users provisionning
and I was wondering if Salesforce supports JIT (just in time provisionning) over OpenID (contact + account + user creation ...
- 15
1
vote
0
answers
54
views
Org-to-org: certificate-based authentication when calling REST APIs
I have implemented SSO among two ORGS. I have made a web services class in my service Org. Can I hit that web service from my Identity provider Org using rest callout? I tried it by making a http get ...
0
votes
0
answers
95
views
Users without 'Is Single Sign-On Enabled' checked flag are still able to log in via SSO
After thorough checking of users, I noticed that some of them, despite having no profile or permission set assigned with 'Is Single-Sign-On' flag enabled, are able to log in via SSO. What can be the ...
- 450
1
vote
1
answer
355
views
Google Workspace SSO-enabled Org Cross-Domain Cookies Error
My Salesforce org has SSO implemented using SAML 2.0 with Google Accounts / Workspace as the Identity Provider (IdP).
Everything worked well, until I recently decided to move from Chrome to Brave as ...
- 121
0
votes
0
answers
80
views
Integrate Salesforce for multiple clients in a single Webapp to Sync data?
I am currently doing some research on how I can integrate Salesforce in our webapp and I am having trouble finding the appropriate methods or docs.
My use case:
We have a multi-tenant website where ...
- 1
0
votes
0
answers
557
views
SSO SAML Failure: Replay Detected
I'm working on implementing SSO into a digital experience for a client. This is my first SSO implementation and I'm pretty unfamiliar with SAML. I've been developing the JIT (Just-in-Time Provisioning)...
0
votes
0
answers
95
views
Automatic browser login to Salesforce with SSO when user is logged into M365 -AzureAD-?
We would like to have Salesforce detect Azure AD user is logged in on the browser (chromium) and use that for automatic sign in. Possible?
Will salesforce look at the logged in windows user and use ...
- 109
0
votes
1
answer
842
views
Marketing Cloud: how to troubleshoot SSO from Azure AD
I've been trying to set up SSO for Marketing Cloud with Azure AD following this article. When testing the connection the browser displays this error message:
"Incoming SAML message is not ...
0
votes
0
answers
351
views
SAML JIT Handler - how to link Contact to User
I have this single sign on configuration:
SAML Identity Type: Assertion contains the Federation ID from the User object
SAML Identity Location: Identity is in the NameIdentifier element of the ...
- 890
0
votes
1
answer
564
views
SSO on salesforce only works for certain users
I just started with SSO on salesforce, I made my configuration on one of our sandboxes, the problem is that when I test the SSO connection or when I add a new user on the sandbox, it works well but ...
- 9
1
vote
1
answer
1k
views
Login into Salesforce community from external website using openid connect
I need to create a link/button to login to salesforce community from external web application. My requirement is external web app needs to be the IDP and OpenId connect should be used as provider type....
- 11
1
vote
1
answer
717
views
Single Sign on and API token grant
I am new to Single Sign on configuration on Salesforce and have a use case which I was hoping the community can advise upon.
We have a web app outside of Salesforce. We are currently in the process of ...
- 151