Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
0 votes
0 answers
25 views

ThirdPartyLinkAccount SOQL Returns 0

Im trying to do a query inside an Apex Class Controller. This is for a login page. integer withCount = [Select count() from ThirdPartyAccountLink where userId =: userList[0].id]; But it always ...
user avatar
0 votes
0 answers
28 views

Selectively enforce authentication route on a group of users

I have configured a OAuth/OpenID SSO Authentication Provider (OKTA) I would like to prevent login with credentials (Except for Admins) Per the instructions, I should see profile permission "Is ...
user avatar
0 votes
0 answers
29 views

How do I stop salesforce SSO between communities that use Okta for SSO?

I have a single Salesforce org which has three experience sites? The goal is to use Okta for the user to log into all 3. Business sites must have business users with business contacts. Personal sites ...
user avatar
1 vote
1 answer
32 views

Single Sign on and API token grant

I am new to Single Sign on configuration on Salesforce and have a use case which I was hoping the community can advise upon. We have a web app outside of Salesforce. We are currently in the process of ...
user avatar
0 votes
0 answers
18 views

SSO Stops working when enabling Basic Authentication in Customer Community

We have a working SSO (auth provider) Authentication in one of our Customer Communities. We enabled the Basic Authentication in addition to SSO. But while enabling this setting from All Sites > ...
user avatar
0 votes
0 answers
69 views

SSO blocking Frontdoor URL logins

I'm using the frontdoor URL method to login to multiple orgs. Some have SSO and some don't. The setup works fine for all orgs. Except for one org... This org has SSO enabled and using the frontdoor ...
user avatar
0 votes
0 answers
32 views

Programmatically retrieve SAML metadata of SF as a service provider

We have 3 full-sync sandboxes + our production org. Every month, the next planned sandbox is refreshed and re-configured. Part of this process is that we enabled SSO on those sandboxes. Once the ...
user avatar
  • 83
0 votes
1 answer
39 views

Is is possible to use Salesforce as an Identity provider for community license users? [duplicate]

I know Salesforce can work as identity or service provider for internal users (standard Salesforce license) However, is is possible to use Salesforce as Identity Provider to make Salesforce external ...
user avatar
  • 194
2 votes
0 answers
93 views

How to implement PKCE flow in custom external authentication provider?

Objective is to implement PKCE (proof key for code exchange ) verification as part of SSO with an external identity provider and Salesforce Experience Cloud Tried so far: Setup a custom Auth. ...
user avatar
  • 3,205
0 votes
0 answers
72 views

Experience Cloud SSO

We are setting up SSO for Experience Cloud with Salesforce as the Service Provider and an external IDP. Everything seems fine until we try to log in. We get the following error in the login history ...
user avatar
  • 101
1 vote
0 answers
51 views

SSO button does not appear on Salesforce Cloudforce.com login page (with MS Azure AD as Single Sign On authenticator)

Does anyone recognize this situation and know of a possible solution? For my Salesforce login, I want to use Azure AD as a Single Sign On (SSO) provider. On Azure AD I have created the app on Azure ...
user avatar
0 votes
0 answers
33 views

Can SSO users be directed away from Salesforce login page?

So with SSO you can use Delegated Authentication so that certain profiles have to use SSO and cannot login via login.salesforce.com. Thats fine. But if those SSO-only users do try and login via login....
user avatar
  • 1,080
0 votes
0 answers
35 views

Update SSO using MetadataService class

I am using below code for updating SAML Identity Type in one of the SSO settings from UserId to FederationId : - MetadataService.MetadataPort service = new MetadataService.MetadataPort(); service....
user avatar
  • 1,378
1 vote
0 answers
53 views

Is SFDC username considered case sensitive when used as SAML identifier?

In our company we have some customers that login into our Experience Cloud portal using SAML in IDP-initiated mode. In SFDC federation setup, the Name IDentifier found in the SAML assertion will be ...
user avatar
0 votes
0 answers
43 views

Issues logging into Salesforce 1 app on iOS

We have enabled SSO on a profile in our org and the login to the Salesforce 1 app fails with the following message for the users with the aforementioned profile Server Error : Can't connect to the ...
user avatar
  • 361
0 votes
0 answers
52 views

Problem Logging In - No_Oauth_State: State was not sent back

I would like to connect GoToApi with Salesforce Org. According to their documentation, I need to go to this URL to get the authorization code: https://api.getgo.com/oauth/v2/authorize?client_id={...
user avatar
  • 285
0 votes
1 answer
65 views

Will Salesforce passwords still expire during SSO usage?

We just implemented SSO in our SF environment with AD Azure being the identity provider. Therefore, we are no longer using the Salesforce passwords for our users. Do we now need to enable "...
user avatar
  • 3,720
0 votes
1 answer
38 views

Prevent most users from logging in via non-SSO methods [duplicate]

I would like to block all of our users from logging in except via SSO. However, I still have some cases where only I need to login with un:pw. Is it possible to allow me to bypass the blocked login? ...
user avatar
0 votes
1 answer
376 views

Why would SSO stop working : malformed_certificate

SSO was working fine, next day it stopped working: (been working for 7+ years) I get this Google Error: That’s an error. Error: malformed_certificate Error while signing data with certificate 7 ...
user avatar
1 vote
0 answers
41 views

SSO with Azure AD Logout Screen

We are using SSO with Azure AD as the id provider. It is working properly for the login process. But when logging out we go through the process and am going through the process and logged out - but am ...
user avatar
  • 3,720
1 vote
1 answer
58 views

Can SAML SSO be selectively enforced for a group of users? [duplicate]

I'm trying to reconcile the following recommendation with the fact that there currently seems to be no way to selectively configure SAML SSO by Profile: We don’t recommend enabling SSO for Salesforce ...
user avatar
0 votes
0 answers
26 views

How to implement the salesforce OAuth flow when client is using SAML (Okta) and it's user doesn't know their username and password

This question regards getting salesforce access token via OAuth for our client. there are 3 parties, salesforce our web app Okta Our web app needs to communicate with salesforce on behalf of our ...
user avatar
1 vote
0 answers
72 views

Single log out for oauth connected app

We’ve followed this guide for single logout (SLO) to call the logout url of our connected app. https://help.salesforce.com/s/articleView?id=sf.connected_app_manage_oauth.htm&type=5 Specifically: “ ...
user avatar
  • 11
-1 votes
1 answer
100 views

Enable MFA in SSO Sandbox login [closed]

I am trying to enable MFA in SSO sandbox login, but while login into the sandbox it is not asking for any authentication. It is working in the case, when I am login without SSO. Can anyone please help....
user avatar
-2 votes
1 answer
73 views

Salesforce Single Logout (SLO) configuration with multiple relying party

In one of the Salesforce implementation I am working on, a single Connected App is being used for Single-Sign-On (Community users) for multiple relying parties (using OpenId protocol). SSO is working ...
user avatar
  • 709
0 votes
0 answers
51 views

Can I Enable Self-Registration Redirection in Conjunction with SSO?

I have a question about Salesforce registration redirection capabilities and I am getting unclear answers from my googlings. Here is the situation: When an anonymous user at our partner site partner....
user avatar
  • 9
-1 votes
1 answer
44 views

Single Sign on with Azure is not working

We have done SAML 2.0 Federated SSO settings in salesforce sandbox org. Azure team refused to import salesforce.com certificate in azure citing security reasons. I had downloaded metadata and shared ...
user avatar
0 votes
1 answer
221 views

OpenID Connect AWS Cognito - ERROR: No_OpenId_Response

Overview Currently using AWS Cognito User Pools as Identity Provider using OpenID Connect for logging in a Salesforce Community. I'm currently getting a similar issue with this post OpenID Connect - ...
user avatar
  • 1,071
0 votes
0 answers
17 views

Issues with Single Sign On Mobile SDK

Version of Mobile SDK Used: 9 iOS: 14.5 I have a Salesforce instance that has Single Sign On Enabled as well as normal Salesforce Sign On. The logon screen has the normal Salesforce Sign on screen, ...
user avatar
  • 1
0 votes
1 answer
89 views

Auth Provider configured as High Assurance continues to prompt users for MFA?

Our users currently log into our org using their salesforce username and password credentials along with their registered verification method of choice for Salesforce's own MFA prompt. We're now in ...
user avatar
  • 2,564
2 votes
1 answer
333 views

How to Generate the SAML SSO login URL using APEX?

We have requirement where we need the SAML SSO login URL dynamically in an Apex controller for all SSO configurations present in the org. We are looking for something apart from custom settings or ...
user avatar
  • 88
2 votes
1 answer
72 views

How to Server Logout a User in Single Sign On SAML Single Log out from Salesforce?

We are using salesforce as service provider and external system as identity provider(ADFS). We are able to successfully sign in and sign out using SAML. However, since salesforce support concurrent ...
user avatar
0 votes
0 answers
86 views

Allow users to login into 3rd Party Apps like Workbench when OKTA SSO is setup with Salesforce

We have enabled OKTA SSO with Salesforce. Once we assign OKTA permission set (with Permission Is Single Sign On Enabled) to user, it cannot login into SF using its credentials. It has to login into ...
user avatar
1 vote
0 answers
154 views

How to authenticate sandbox to VS Code with Multi-factor required

I am trying to authenticate my VS Code to one of my sandbox and when I am entering my credential into the salesforce UI it is literally doing nothing and when I am checking login history for my user, ...
user avatar
  • 2,637
0 votes
0 answers
27 views

Marketing Cloud SSO Config Failure - ReplyURL mismatch

I did all the configurations as mentioned in the steps here: Salesforce Marketing Cloud - Azure SSO Implementation I am redirected to IdP login screen, when I load the Marketing Cloud SP Url. But then ...
user avatar
  • 2,233
0 votes
0 answers
190 views

How to Authenticate Experience Cloud(Community) Users in React Native App and pass session Id to Experience Cloud Site

We are building a React native app in which we have displayed experience cloud site using react native web-view & iframe. Everything works fine but every time users open the app they need to enter ...
user avatar
  • 10.4k
0 votes
0 answers
32 views

Forget password link from SSO does not redirect back to callback url

We have set up a connected app in Salesforce and configured a callback url for integration with a separate authentication management system. When logging in from our application, upon successful ...
user avatar
  • 1
1 vote
0 answers
62 views

Setting up Auth Provider with SSO

I am calling a REST API using Auth provider and Named credential, but the client wants to use their IDP SSO instead of using API credentials. Is there a way we can configure an SSO with Auth Provider ...
user avatar
1 vote
0 answers
26 views

Pardot Campaign and user sync when connecting to a new SFDC org [closed]

We are going to merge our Salesforce org with other org. We need to connect our Pardot to new org. I had a question about CRM id which was answered clearly below by @Sanket Nagure. Thanks for that ...
user avatar
  • 11
0 votes
1 answer
122 views

Possible security concern for embedding Qlik dashboard as an Iframe on a VF Page [closed]

I'm working on a use case to embed a Qlik dashboard on Salesforce . I understand that to achieve this one would have to setup SF as Identity Provider , configure connected app and SAML settings on ...
user avatar
  • 517
0 votes
1 answer
81 views

Limit on a number of SAML identity providers

Is there a limit on a number of external SAML identity providers created under Security Controls > Single Sign-On Settings
user avatar
1 vote
1 answer
189 views

Cannot enter to community using SSO

I have an IDP provider(from third party) and configured an SSO connection (on my org). After authorization on IDP, I try to log in to the community by following the link I took in the SSO settings for ...
user avatar
  • 11
1 vote
1 answer
140 views

Connected App - Custom Attribute From Related Contact on User

Trying to create / expose a custom attribute from the User record in a connected app through SAML. The value in question is from the Account of the related contact, thus User.Contact.Account....
user avatar
0 votes
0 answers
563 views

Iframe not work with chrome

I have a mistake with iframe. This is it The URL is built in Apex controller and return the URL Login into the external website. My problem is that the login not works now but few weeks ago it ...
user avatar
1 vote
2 answers
6k views

SSO login error with Salesforce

I received following error "We can't log you in because of an issue with single sign-on. Contact your Salesforce admin for help" when I try to login to Salesforce via SSO. I have setup SSO ...
user avatar
0 votes
0 answers
54 views

Community SSO using JWT

We are setting up a Salesforce Community and our community members should be able to automatically login from 3rd party and at their end they will create the JWT payload and via connected app ...
user avatar
  • 620
0 votes
1 answer
126 views

Receiving custom attributes from an external identity provider using OAUTH for SSO?

My situation here is that I want my Salesforce Digital Experience (AKA Community) to use an external identity provider that holds some custom access rights attributes that need to be transferred to ...
user avatar
  • 129k
1 vote
1 answer
274 views

How to get my SSO app to work with multiple orgs?

Summary: I want to use Salesforce as an identity provider to allow people to log into my app, regardless of what salesforce org they use. I've created an app in PHP that uses SimpleSAMLphp to ...
user avatar
  • 11
1 vote
1 answer
819 views

Deeplink redirect after community SSO login

We are using the "Social Login" Component on a custom Experience Builder Page (EBP); With a very standard SSO setup; The tick box for the specific SSO is ticked in the Community(Site) ...
user avatar
0 votes
1 answer
87 views

What SSO (SAML) attributes from Salesforce can I use as a globally unique user identifier?

I'm using Salesforce as the identity provider (IdP) in a single sign-on application I'm developing in php. After the user logs into Salesforce.com to authenticate, they are redirected to my app and ...
user avatar
  • 11

1
2 3 4 5
11