Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
0
votes
0answers
12 views

SSO authentication at API level

I am trying to automate a mobile application in my organization which uses SAML based SSO authentication to allow any user to login to the app. What I am trying to achieve is to perform an action in ...
0
votes
1answer
48 views

SSO for Salesforce Sites

I have a force.com site which is used by external users. I want to have SSO authentication from an external IDP, SAML. I prefer it to be when a param is transferred on the URL site - check it on the ...
-1
votes
0answers
15 views

Azure SSO with SF - appending .com to users email address [closed]

I have setup SSO with Azure but my Azure users are coming thru with .com at the end of the email address: peter@mydomain.co.uk.COM I cant find a reason for this on the Azure side
2
votes
1answer
25 views

OAuth 2.0 SSO Custom provider - get custom parameter from url in initiate() method

We have a working external identity provider SSO Oauth 2.0 with custom apex provider. (External app redirects to a specific SF community) We need to extend it to accept a custom parameter from the ...
3
votes
2answers
86 views

Let external system modify Salesforce data on behalf of logged in user

I am going to build a native Salesforce app (Managed package) that will be installed in many subscriber orgs. The app will make callouts (eg. calling REST endpoint) to external Java app. The Java ...
-1
votes
0answers
19 views

Single Sign-On Error instead of a Visualforce

Some users in our org report that they get a Single Sign-On error page while they are trying to access some pages in the org, this pages are Visualforce pages accessible through a button or embedded ...
2
votes
1answer
22 views

Is there a need to renew the Self Signed Cert for Single Sign On if Salesforce is not the Identity Provider?

Based on this help article and this community post, can we allow the Self Signed Cert within Salesforce to expire if we do not use Salesforce for an Identity Provider? Is there any harm in doing this? ...
0
votes
0answers
37 views

SAML authentication flow, do not require user to click “Log in with <sso idp option>”

I am setting up a client with a SAML IdP and SP for their site, and one of their partners now needs to tie into this system. They use force.com to do so. We have SSO working as described in this doc: ...
1
vote
1answer
54 views

Need help on Salesforce Login Discovery using My domain

requirement- When user enter username then it will redirect to SSO setup in salesforce and if user entered correct details then second sso needs to get called and if user enter correct credentials ...
0
votes
0answers
24 views

Need help on Salesforce Login discovery

Requirement-I want one of the dedicated profile to be redirected to seprate SSO flow and others needs to redirect to normal username/password flow. I have gone through Login discovery but it seems to ...
1
vote
1answer
35 views

Can we remove the ability to login using a username for community members, and only include the ability to login using KP Single Sign-on?

Can we remove the ability to login using a username for community members, and only include the ability to login using KP Single Sign-on?
1
vote
1answer
40 views

Just-in-Time Provisioning for Communities Mixed DML Error

We are trying to implement Just-in-Time Provisioning for Communities using custom handler class. There are 3 scenarios When Contact with the provided email (Federation ID) exist in salesforce and ...
0
votes
1answer
78 views

How to bypass login page in URL redirects after SSO setup

After SSO is set up, when I tried to redirect the user to the second Salesforce org, it takes the user to login page. Do I have to do any more authentication before redirection? my controller is below....
1
vote
1answer
96 views

Deployment to Scratch Org failing

I've one single sign on setting which need to be deployed every time upon scratch org creation. SSO has a JITHandler with it which is part of source and deployed to scratch org. I know that SSO ...
1
vote
1answer
39 views

Can we use frontdoor.jsp to give access to salesforce vf page, without using username and password?

If the SSO is set up, can we use frontdoor.jsp without using Username password? I would like to access the second salesforce org from first salesforce org. SSO has been set up already. Canvas ...
4
votes
1answer
101 views

SAML Assertion Validator crashing on encrypted assertion

I'm adding support for encrypted assertions to my SAML 2 IDP, and I'm trying to validate them against a number of SPs we work with. Everything looks good at https://www.samltool.com/online_tools.php (...
3
votes
0answers
87 views

Single Sign On (SSO) with Active Directory Federation Services (ADFS) as Identity Provider

There are other general questions regarding SSO here and here, but I'm specifically running into this error when using ADFS as the IdP: Incoming SAML message is not properly formatted, or has ...
1
vote
1answer
125 views

Marketing Cloud Download Metadata for Single Sign-On (SSO)

In the Single Sign-On documentation, it states there is a Download Metadata link available to retrieve metadata needed to setup SSO. I don't see this anywhere in the Security Settings in Admin. ...
0
votes
2answers
30 views

Salesforce as identity provider for third party applications -How to extend it for communities

I have enabled Single sign on between salesforce and a thirdparty app using SAML. I have created a connected app where I have configured the SAML Service Provider Settings. We am accessing the ...
0
votes
0answers
25 views

Navigate from one sso saml protected SP org to another saml protected SP org without logging into the 2nd SP?

I have 2 service providers, SP1 and SP2 both connected to an IDP through SSO and I have obtained my SAML response from IDP into SP1. Now, I want the user from SP1 to go to SP2 upon clicking a link/...
1
vote
1answer
43 views

How to get data from one Service Provider to another Service Provider using the obtained SAML assertion?

I have 3 Salesforce orgs (IDP, SP1 and SP2) and have set up SSO where IDP is my Identity-Provider and SP1 and SP2 are 2 Service-Providers. Using SP1-initiated SSO login, the user gets authenticated in ...
0
votes
0answers
27 views

CustomLandingController seems to be not working when SSO is used for community login

I've a requirement to setup customer community(SSO based Authentication/ No Username-Password login allowed) with few Pages to be displayed if User is coming to community for the first time. Here, ...
0
votes
0answers
29 views

Debug Single Sign-On

I haven't worked with single sign-on very much and currently I am trying to get single sign-on setup with Azure AD as the identify provider. I've walked thru the steps and I have a successful ...
1
vote
0answers
38 views

Error: Invalid HTTP method in community SSO

Have set up my community SSO by referring Configure SSO Across Multiple Salesforce Orgs. After that when I try to login I am getting below error. Error: Invalid HTTP method I tried to have set up ...
1
vote
1answer
47 views

Disable forgot password for SSO Users

We have enabled SSO for our users. How can I prevent users from using salesforce login(login.salesforce.com) if they know saleforce password from before setting up sso or if they reset their password ...
0
votes
0answers
44 views

Implementing Single Logout (SLO) with OneLogin is Donwloading a file when arriving to /secur/logout.jsp

Situation: Implementation of Single Logout in Salesforce IdP: OneLogin ServiceProvider: Salesforce Protocol: SAML In our test environment, when we try to logout from a community we are redirected to '...
0
votes
3answers
113 views

Multi-Org Android Configuration Microsoft MDM Intune

I am trying to configure Intune MDM (Mobile Data Management) to push multiple instances of Salesforce in the app config. Intune provide a JSON configuration for Android for Works and a XML ...
1
vote
1answer
69 views

Consume external REST API user-aware (without having to re-login)

I have an Apex class that is consuming a partners REST webservices. Currently all users of my app (in the installed org) access the service via a single API Integration user. We now want make the ...
0
votes
0answers
50 views

Error in Signature when generating SAML Assertion

I'm trying to create my own SAML assertion generator that creates the same kind of assertion a connected app would when clicking the idP initiated login url because we need to automate that step for ...
0
votes
0answers
15 views

Find out who/what created a Self-Signed Certificate

I have a Self-Signed Certificate about to expire in a production org. No one has a clue who/what created it and what it's used for. Is there anyway to find out who/what created it to figure out why is ...
0
votes
1answer
73 views

Salesforce SAML Single logout

I have a single sign on functionality in my site with Salesforce as identity provider. I have a saml enabled connected app in Salesforce, also it was single logout enabled. I'm done with sign on, ...
0
votes
0answers
64 views

Missing value - could not find unique third party identifier while instgram sso login

I am trying to implement social login with Instagram to access community- I have created auth provider as openId connect. I have created auth provider class- global class InstagramRegHandler ...
0
votes
0answers
32 views

Salesforce SSO and ADFS 3.0 [duplicate]

I am trying to set up sso in my org using ADFS 3.0 and it seems that, no matter what setting I choose, I cannot make them work. My biggest issue is that there is no tutorial/documentation to guide you ...
0
votes
1answer
97 views

Social login to community using instgram

I have created Auth provider- Auth. Provider ID 0SO0o000000TOPA Provider Type Open ID Connect Name - Insta URL Suffix - Insta Consumer Key - Instagram consumer key Consumer Secret - Instagram ...
0
votes
1answer
53 views

Salesforce1 Mobile SSO with OpenID Connect, possible?

Reading through the SSO possibilities, I found nothing related to SalesforceApp SSO with the OpenID Connect I got documentation related only to implementation with SAML Is is possible by any chance ...
0
votes
0answers
14 views

Established identity connect setup . Not able to see all users from AD in identity connect

Description: Login to identity connect The association rules on Salesforce Org tab is set to Match only Employee Number. Trying to sync the users from AD to salesforce. Showing up only 1 user Note: ...
0
votes
2answers
33 views

Error while logging into salesforce using Google Oauth

We have our Org connected with google using open-id configuration. When User tries to log in to Salesforce using Google, the system checks for the user's gmail id in slaesforce user profile and if it ...
2
votes
0answers
47 views

Authenticate Connected App (Mobile) with Single Sign on

I have a mobile app that uses OAuth to login users. That part works really well, but recently I was asked to make it work for SSO (Single Sing-On). The app as it is has a weird behavior. To be able to ...
0
votes
0answers
13 views

Embedded login page from community

While implementing embedded login - how can I can my passwordless login community page as inline through "salesforce-mode" meta tag? When I put "salesforce-mode" to inline I do not get my community ...
0
votes
0answers
13 views

canvas app not passing the signed request when the customer org has SSO

we developed a managed package that includes visualforce with canvas app that displays a third app. the third app required SSO in order to login. I have installed my package on ED environment and ...
1
vote
1answer
130 views

How to setup Salesforce Identity Provider to work with Twilio Flex

What is the process to setup Salesforce Identity Provider to work with a 3rd party like Twilio Flex? Whenever I try to login, I get this error: Incorrect HTTP Method
0
votes
0answers
28 views

Authenticated Callout to Webservice using SSO

We are facing the following problem. We need to make webservice callout through Mulesoft in a way the user is making the call is not a service user, but the logged one: Both Salesforce and ...
0
votes
1answer
78 views

OpenId access token does not work for rest api

I want to use OpenId for Salesforce authentication. I have done the following: created an auth provider (like in this tutorial: https://help.salesforce.com/articleView?id=sso_provider_sfdc.htm&...
0
votes
0answers
67 views

Automatic login with Salesforce

I would really appreciate if anybody could guide me to achieve this requirement. A user has told me recently that in his company, the technology team has developed a desktop app whose main purpose is ...
0
votes
0answers
18 views

Change landing app in lightning

Use Case: Our org have users coming from 2 sources using SSO. There are some common users between these sources. If user is coming from Source A, lets say landing app after SSO should be "Sales" and ...
0
votes
0answers
12 views

Community user needs to redirect to login page when logged out

We have a community and users who are using the community are logging into Community using Third party authorization. When logged out, it is showing that the user is still logged in with an error ...
0
votes
2answers
79 views

SSO connection within same salesforce org

We have two communities - Partner Community and Customer community. we need a Partner community user to login into customer community. These two already exists in Production. A user can be part of ...
0
votes
1answer
118 views

Redirect to Authentication Provider Page instead of salesforce login page

I have created an open id connection between external authentication provider and salesforce. Now the requirement is when my domail url is entered in browser, it has to redirect to authentication ...
0
votes
0answers
74 views

We can’t log you in because of the following error. For more information, contact your Salesforce administrator. NO_ACCESS: Unable to find a user

I have created a connection with Keycloak and am trying to log in to salesforce using the Keycloak's authentication. I have configured open id configuration using salesforce manual and also given the ...
0
votes
1answer
151 views

Users need to login using External Authentication Provider

I have a requirement where users need to log in to salesforce using external authentication provider. The configuration in Open-id authentication. I have created the connection in Auth.Providers along ...