Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
0 votes
0 answers
15 views

Programmatic selection of SAML config/url upon login

Salesforce allows an org to have multiple SAML configurations under Single Sign on settings. Under My domain one can modify the authentication configuration and select multiple SAML configs under the ...
Strong Like Bull's user avatar
0 votes
0 answers
40 views

Two profiles or permission sets and limiting access to one SSO or the other. Possible?

We use Cloud Access Management (CAM) for our SSO. Is it possible to configure two CAM SSO profiles and have that assigned to different sets of users so that User A for instance is given CAM SSO ...
Strong Like Bull's user avatar
0 votes
1 answer
24 views

Single Log Out (SLO) error when logging user out of salesforce community

I have single sign on configured where Salesforce is the SP, as shown below in screenshot and we need to use single log out (SLO) to log the community user out of salesforce and IDP as well. However, ...
Avinash Kaltari's user avatar
-1 votes
0 answers
21 views

When I login from community site , user is able to access salesforce as well. We need to remove the sessionId cookie from the browser for salesforce

We have a salesforce profile which has access to both salesforce and lightning community site. After setting up the SSO for this profile, when users are accessing community site outside the company ...
Sakshi gupta's user avatar
0 votes
1 answer
32 views

How can I handle user provisioning with Azure when a user is in multiple groups?

I have a working Azure user provisioning flow. The issue I am facing is if a user is in multiple groups I don't know how to set a priority system. Is there a way I can setup a priority system on Azure ...
Matthew H's user avatar
0 votes
0 answers
39 views

Calling APIs via oAuth and fine-grained authorization

I have an external system calling my middleware which then calls Salesforce to retrieve some data. Users login to the external system via an External IDP and retrieve an Access/Refresh Token and an ID ...
some guy's user avatar
  • 141
-1 votes
1 answer
39 views

Login with salesforce option on an external website redirecting to salesforce home page after login

We have a single sign on using webauth as identity provider to login to salesforce. Now, I have an external website where they provide a "Sign in with salesforce" option. Whenever I try to ...
karthik's user avatar
  • 39
-1 votes
1 answer
108 views

Can we setup salesforce sso or Idp login within Iframe to login to a external site

I have an Iframe in salesforce which loads an external site that supports salesforce sso, currently I'm redirecting the user to the external site auth0 login page and once they login I redirect them ...
R_M_R's user avatar
  • 1
0 votes
0 answers
38 views

SSO into community experience site from a custom third party IdP using JWT Token

I'm trying to setup SSO login for customers into one of our Salesforce digital experience sites. The IdP is a third party custom solution that generates a JWT token. SAML isn't currently an option. I'...
Jay Mclaughlin's user avatar
0 votes
0 answers
41 views

Implementing SAML SSO - Azure and federation id in Salesforce. Need to force sso but only for some users (not admins or integration users)

Implementing SAML SSO - Azure and federation id in Salesforce. Need to force sso but only for some users (not admins or integration users) Can't find how to only have it forced for some. Found: ...
Suzanne R's user avatar
1 vote
0 answers
117 views

SAML validation issues

Setting up SSO with Google as an IDP and Salesforce as a service provider. I see the following when validating SAML: Current time is after notOnOrAfter in Conditions Current time is: 2024-01-11T17:...
user1702965's user avatar
-1 votes
1 answer
71 views

SSO - black screen - issue

We are facing strange issue for SSO login. user landing on blank screen(blue color). This is not happening every time. if users landing on blue screen, we are deactivating and activating back in IDp ...
S B's user avatar
  • 533
0 votes
0 answers
60 views

How do you do Canvas Authentication in React application?

I am having the nodeJS+React application and now I want to embedded it in Salesforce via Canvas. I have to validate the sign request to find out authenticate users and then need to redirect users to ...
Amila ranganath's user avatar
1 vote
1 answer
357 views

How to Authorize VS Code to Dev Org with SSO/Okta

I am looking to authorize my VS Code to an org that utilizes SSO/Okta. How can this be done?
magdalena's user avatar
1 vote
1 answer
122 views

Custom LWC for E-Signature via SSO

I have received a requirement to build a custom LWC used for verifying the users identity which is then embedded in a flow. In case the user can verify his or her identity the flow proceeds. Now I ...
Jakub Zvonek's user avatar
0 votes
0 answers
259 views

Using same certificates in production and sandbox for SSO(SAML)

We're using custom domains in sandbox for my communities(2) and performing SSO between them, where one community is acting as an identity provider(IdP) and other as service provider(SP) To enable SSO ...
sfdc_Qrius's user avatar
1 vote
1 answer
164 views

SSO using SAML - Error using Heroku App setting Up SAML

I am trying to test out by setting up SSO in my trailhead org. Following these steps - https://help.salesforce.com/s/articleView?id=sf.sso_service_provider_configuration.htm&type=5 I setup SSO ...
SfdcBat's user avatar
  • 4,811
0 votes
1 answer
173 views

Can different single sign on be configured for internal org and experience cloud portal?

Can different single sign on authentication providers be configured for internal users and experience cloud portal users? I assume we can have multiple SAML SSO authentication providers setup but how ...
Patlatus's user avatar
  • 17k
0 votes
0 answers
177 views

SSO and CA-signed certificates

We are trying to set up SSO with Okta for our prod salesforce instance. And one of the compliance requirements from our IT/security department is to use only CA-signed certificates, i.e. self-signed ...
wesaw's user avatar
  • 3,080
0 votes
0 answers
41 views

Salesforce MobileSDK app login via SAML SSO still required to perform Salesforce MFA

My org has an SAML 2.0 Single Sign-On enabled with: Azure AD: SAML Identity Type: Federation ID SAML Identity Location: Subject Service Provider Initiated Request Binding: HTTP Redirect Use ...
raveeBunduwongse's user avatar
0 votes
0 answers
168 views

Sending a multi-valued attribute in SAML assertion

I made connected App in Sandbox to log in AWS using SSO from Salesforce (SFDC-identity Provider, AWS - ServiceProvider) we set up NAME ID Format (urn:oasis:names:tc:SAML:2.0:nameid-format:persistent) ...
송지은's user avatar
0 votes
0 answers
84 views

SSO without SAML or OpenID Connect

What are the other options can we use for SSO with Salesforce as the identity provider if the other party does not support SAML or OpenID Connect? Is it necessary to use a Custom Bridge that can ...
LearningIssue's user avatar
0 votes
0 answers
64 views

Community - Allowing Direct Login but Preferring SSO

My Community uses a homegrown system as its IdP. The identity portion runs on Okta. When the user clicks a link in the homegrown system, they are brought to the Community and logged in using SSO. We ...
Bob Hatcher's user avatar
0 votes
0 answers
129 views

SSO between Experience Cloud and external E-commerce site

The client needs Is the following: From the e-commerce (external hosted) when they want to register,they are redirected to the salesforce community Page where they can log-in or register. After they ...
LearningIssue's user avatar
0 votes
0 answers
75 views

Log in and Sign Up to a Salesforce Community from an External System

I have a scenario where the customer can sign up/login from an external ecommerce system to a salesforce community with SSO and land on the community. How can i achieve this? Salesforce as Identity ...
stackusiastic's user avatar
0 votes
0 answers
123 views

Single Logout (SLO) via OpenID Connect

We use an external identity provider to verify credentials with SSO via OpenID Connect to Salesforce Experience Cloud as the Relying Party. After the the person logs out from Site A, he should be ...
Fark's user avatar
  • 27
-3 votes
1 answer
69 views

Login to Salesforce from .NET [closed]

I tried to login to as salesforce community user from a .NET application "https://perfectvisionpoe--pvccdevorg.sandbox.my.salesforce.com/services/Soap/c/55.0/_____" API callout but I am able ...
Anu's user avatar
  • 3,857
0 votes
0 answers
162 views

How to get the service provider Id from a connected app of SSO

We have service provider id in Salesforce which looks something like this - '0sp3I0000004CN4' This is used in the IdP-Initiated Login URL. Here is the documentation for that: IdP-Initiated Login URL ...
Jayant Jaiswal's user avatar
0 votes
0 answers
35 views

Can SSO be configured via API between Salesforce and Okta?

I would like to use Okta as an IdP. Now, imagine I need to configure 10 Okta instances with 10 Salesforce instances. Is there any way I can automate the process of setting up SSO via API for each of ...
Mrquestion's user avatar
0 votes
0 answers
43 views

If we enforce SSO to Salesforce and it breaks how do we log in as an admin to fix? [duplicate]

We have Azure AD to Salesforce SSO. We don't want to allow the option for SSO users to log in directly. If we enforce SSO to Salesforce and it breaks how do we log in as an admin to fix? For example, ...
Eric's user avatar
  • 109
1 vote
1 answer
881 views

SSO with Communities: Invalid portal id

I am implementing single sign on with my customer, salesforce acting as service provider. We already tested the single sign on and it works for us with the Salesforce organization. We can log into the ...
TestUser's user avatar
0 votes
0 answers
884 views

"The Single Sign-On Gateway Url is invalid" error when making API calls

I'm testing API calls to Salesforce via Connected Apps in an environment where SSO is enforced via Permission sets. For the SSO I'm federating using Facebook. The communication works fine without SSO (...
user777's user avatar
0 votes
1 answer
184 views

Problem with Salesforce as Service Provider (SP) and other system as Identity Provider (.PEM certificate)

I am trying to implement single sign on (SSO) with my client, using SAML 2.0. My client has an application in "Outsystems", "Outsystems" will act as Identity Provider (IdP) and ...
TestUser's user avatar
-1 votes
1 answer
2k views

Populating a Federation ID when implementing SSO

We are about to implement SSO, with Azure being the Identity Provider. If we use Federation ID to be the unique identifier for SSO how will we populate the Federation ID field in Salesforce ? Is it up ...
Zoom_v's user avatar
  • 3,884
2 votes
1 answer
700 views

Why doesn't SSO between my Digital Experience sites work?

The steps here Configure SAML SSO Between Salesforce Orgs or Experience Cloud Sites are detailed and clear. But having gone through those, I'm still seeing the the separate logins rather than the ...
Keith C's user avatar
  • 136k
0 votes
0 answers
231 views

How to launch IDP-initiated SSO for a SAML-enabled Connected App?

I have a SAML-enabled connected app configured for a 3rd party service provider to be used by community users (SF is IdP). However, I can't expose SF's native app launcher as this community is under ...
Jan Julian's user avatar
  • 2,634
3 votes
0 answers
129 views

Is single sign-on for self-registering Digital Experience users possible?

We have a Digital Experience that includes self-registration logic that, when completed correctly, goes ahead and creates the necessary Contact and User resulting in the welcome email being sent. The ...
Keith C's user avatar
  • 136k
-1 votes
1 answer
236 views

SSO login to shared account

sso enabled in org and everything works fine. we have new requirement like 2 different users want to login with same account I mean user x and user y wants to login salesforce with same user called xy ...
S B's user avatar
  • 533
0 votes
0 answers
26 views

Help with SamlJit Handler regarding querying total number of profile license

We activated SSO in Salesforce and Azure, the users that will login to the community portal should have the license Salesforce Platform. How can I query this profile license in the SamlJit Handler and ...
Bibs's user avatar
  • 1
0 votes
0 answers
298 views

How to obtain access token after SSO when Salesforce is a service provider?

Our users log into Salesforce using the Single Sign-On provided by our Employer. Here Salesforce is a service prover and the Employer's system is the identity provider. The SSO is configured based on ...
Ram Dhayalan's user avatar
3 votes
1 answer
6k views

Will "Disable login with Salesforce credentials" lock-out Administrators as well?

We have Okta setup as a SSO provider for Salesforce. We want to restrict all non-Administrators from logging in with their Salesforce Username and Password. However, we still want Administrators to be ...
Swisher Sweet's user avatar
-1 votes
1 answer
1k views

Cannot login to new Sandbox

We have a new Salesforce org. SSO enabled for user login in Production. I created a new sandbox (Developer Pro) from Production. After Sandbox was created, I got an email Sandbox: xxx is ready to use ...
GroundToCloud's user avatar
-1 votes
1 answer
316 views

MFA and SSO issue

we have had SSO setup for Salesforce a while now and recently had to setup MFA as it was being auto enabled by Salesforce, but now the users are asked to download the authenticator app, Is there ...
Mike's user avatar
  • 1
0 votes
0 answers
512 views

Is there a simple way to test a SAML JIT handler class?

I'm in the process of configuring Single Sign-On for my org and this org will require JIT user provisioning. I've written a custom SAML JIT handler class to handle that logic and now I want to test ...
Jason Fung's user avatar
1 vote
0 answers
343 views

Passing information from custom SAML JIT handler to error URL

Using SSO in SF, there is an option to insert Apex in the SAML JIT Handler. For each scenario, failure or success, there are fields intended for redirecting the user automatically (Custom Logout URL, ...
Salvation's user avatar
  • 1,189
1 vote
1 answer
1k views

SAML - difference between Identity Type and Identity Location

I am implementing Salesforce as a service provider and I am expected to provide some general guidelines to the application which will be set as the identity provider. There is documentation explaining ...
DevelBase2's user avatar
1 vote
1 answer
449 views

Auth Provider with a Google account: redirect the user after they log in [duplicate]

I have setup SSO for an experience cloud site, I selected Google for the SSO and did not specify the authentication URLs and consumer key/secret. The SSO works fine, what I want to do is redirect the ...
0xFlem's user avatar
  • 11
0 votes
1 answer
360 views

Is Salesforce supporting JIT (just in time provisionning) over OpenID

We want to use OpenId SSO for our Salesforce Community Users provisionning and I was wondering if Salesforce supports JIT (just in time provisionning) over OpenID (contact + account + user creation ...
alex's user avatar
  • 15
1 vote
0 answers
62 views

Org-to-org: certificate-based authentication when calling REST APIs

I have implemented SSO among two ORGS. I have made a web services class in my service Org. Can I hit that web service from my Identity provider Org using rest callout? I tried it by making a http get ...
nischal vasisth's user avatar
0 votes
0 answers
190 views

Users without 'Is Single Sign-On Enabled' checked flag are still able to log in via SSO

After thorough checking of users, I noticed that some of them, despite having no profile or permission set assigned with 'Is Single-Sign-On' flag enabled, are able to log in via SSO. What can be the ...
Rechu's user avatar
  • 452

1
2 3 4 5
12