Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

0
votes
1answer
2 views

Disable forgot password for SSO Users

We have enabled SSO for our users. How can I prevent users from using salesforce login(login.salesforce.com) if they know saleforce password from before setting up sso or if they reset their password ...
0
votes
0answers
10 views

What alternate email service provider (ESP) can be used instead of GSuite on Salesforce Communities? [on hold]

My community users login using Google SSO. Also, they need to send emails to other community users. This happens using GSuite in the background. A user won't understand if it's Gsuit or something else,...
0
votes
0answers
21 views

Implementing Single Logout (SLO) with OneLogin is Donwloading a file when arriving to /secur/logout.jsp

Situation: Implementation of Single Logout in Salesforce IdP: OneLogin ServiceProvider: Salesforce Protocol: SAML In our test environment, when we try to logout from a community we are redirected to '...
0
votes
1answer
36 views

Multi-Org Android Configuration Microsoft MDM Intune

I am trying to configure Intune MDM (Mobile Data Management) to push multiple instances of Salesforce in the app config. Intune provide a JSON configuration for Android for Works and a XML ...
0
votes
1answer
31 views

Consume external REST API user-aware (without having to re-login)

I have an Apex class that is consuming a partners REST webservices. Currently all users of my app (in the installed org) access the service via a single API Integration user. We now want make the ...
0
votes
0answers
24 views

Error in Signature when generating SAML Assertion

I'm trying to create my own SAML assertion generator that creates the same kind of assertion a connected app would when clicking the idP initiated login url because we need to automate that step for ...
0
votes
0answers
11 views

Find out who/what created a Self-Signed Certificate

I have a Self-Signed Certificate about to expire in a production org. No one has a clue who/what created it and what it's used for. Is there anyway to find out who/what created it to figure out why is ...
0
votes
1answer
27 views

Salesforce SAML Single logout

I have a single sign on functionality in my site with Salesforce as identity provider. I have a saml enabled connected app in Salesforce, also it was single logout enabled. I'm done with sign on, ...
0
votes
0answers
50 views

Missing value - could not find unique third party identifier while instgram sso login

I am trying to implement social login with Instagram to access community- I have created auth provider as openId connect. I have created auth provider class- global class InstagramRegHandler ...
0
votes
0answers
15 views

Salesforce SSO and ADFS 3.0 [duplicate]

I am trying to set up sso in my org using ADFS 3.0 and it seems that, no matter what setting I choose, I cannot make them work. My biggest issue is that there is no tutorial/documentation to guide you ...
0
votes
1answer
48 views

Social login to community using instgram

I have created Auth provider- Auth. Provider ID 0SO0o000000TOPA Provider Type Open ID Connect Name - Insta URL Suffix - Insta Consumer Key - Instagram consumer key Consumer Secret - Instagram ...
0
votes
1answer
41 views

Salesforce1 Mobile SSO with OpenID Connect, possible?

Reading through the SSO possibilities, I found nothing related to SalesforceApp SSO with the OpenID Connect I got documentation related only to implementation with SAML Is is possible by any chance ...
0
votes
0answers
9 views

Established identity connect setup . Not able to see all users from AD in identity connect

Description: Login to identity connect The association rules on Salesforce Org tab is set to Match only Employee Number. Trying to sync the users from AD to salesforce. Showing up only 1 user Note: ...
0
votes
2answers
23 views

Error while logging into salesforce using Google Oauth

We have our Org connected with google using open-id configuration. When User tries to log in to Salesforce using Google, the system checks for the user's gmail id in slaesforce user profile and if it ...
2
votes
0answers
31 views

Authenticate Connected App (Mobile) with Single Sign on

I have a mobile app that uses OAuth to login users. That part works really well, but recently I was asked to make it work for SSO (Single Sing-On). The app as it is has a weird behavior. To be able to ...
0
votes
0answers
9 views

Embedded login page from community

While implementing embedded login - how can I can my passwordless login community page as inline through "salesforce-mode" meta tag? When I put "salesforce-mode" to inline I do not get my community ...
0
votes
0answers
11 views

canvas app not passing the signed request when the customer org has SSO

we developed a managed package that includes visualforce with canvas app that displays a third app. the third app required SSO in order to login. I have installed my package on ED environment and ...
1
vote
1answer
81 views

How to setup Salesforce Identity Provider to work with Twilio Flex

What is the process to setup Salesforce Identity Provider to work with a 3rd party like Twilio Flex? Whenever I try to login, I get this error: Incorrect HTTP Method
0
votes
0answers
17 views

Authenticated Callout to Webservice using SSO

We are facing the following problem. We need to make webservice callout through Mulesoft in a way the user is making the call is not a service user, but the logged one: Both Salesforce and ...
0
votes
1answer
50 views

OpenId access token does not work for rest api

I want to use OpenId for Salesforce authentication. I have done the following: created an auth provider (like in this tutorial: https://help.salesforce.com/articleView?id=sso_provider_sfdc.htm&...
0
votes
0answers
41 views

Automatic login with Salesforce

I would really appreciate if anybody could guide me to achieve this requirement. A user has told me recently that in his company, the technology team has developed a desktop app whose main purpose is ...
0
votes
0answers
18 views

Change landing app in lightning

Use Case: Our org have users coming from 2 sources using SSO. There are some common users between these sources. If user is coming from Source A, lets say landing app after SSO should be "Sales" and ...
0
votes
0answers
10 views

Community user needs to redirect to login page when logged out

We have a community and users who are using the community are logging into Community using Third party authorization. When logged out, it is showing that the user is still logged in with an error ...
0
votes
2answers
30 views

SSO connection within same salesforce org

We have two communities - Partner Community and Customer community. we need a Partner community user to login into customer community. These two already exists in Production. A user can be part of ...
0
votes
1answer
35 views

Redirect to Authentication Provider Page instead of salesforce login page

I have created an open id connection between external authentication provider and salesforce. Now the requirement is when my domail url is entered in browser, it has to redirect to authentication ...
0
votes
0answers
34 views

We can’t log you in because of the following error. For more information, contact your Salesforce administrator. NO_ACCESS: Unable to find a user

I have created a connection with Keycloak and am trying to log in to salesforce using the Keycloak's authentication. I have configured open id configuration using salesforce manual and also given the ...
0
votes
1answer
46 views

Users need to login using External Authentication Provider

I have a requirement where users need to log in to salesforce using external authentication provider. The configuration in Open-id authentication. I have created the connection in Auth.Providers along ...
1
vote
1answer
84 views

Single Sign on in sandbox

I am attempting to configure single sign on in our org. We are using Azure DevOps as the provider. We need to test in our sandbox before we deploy this feature to production. We have single sign on ...
0
votes
1answer
60 views

Single sign on login Issue

I have SSO login failure.Can anyone help me to know about timestam issue Checking that the timestamps in the assertion are valid Current time is after notOnOrAfter in Conditions Current ...
1
vote
0answers
48 views

OpenID Single Sign On - Change Authentication Flow

I have an Auth Provider created with OpenID and everything is working good. But, I would like to change the Authentication Flow from web server to user-agent Source: https://help.salesforce.com/...
0
votes
3answers
47 views

Seamless Sign On - Single Sign On

I am using OpenID protocol and my need is to make the access to Salesforce seamless, after the user is authenticated by the Identity Provider. My Identity Provider is a internal LDAP managed by ...
1
vote
2answers
91 views

Salesforce SSO - unique usernames needed between Sandbox and prod environment?

Our team is trying Salesforce and we have a sandbox and a production Salesforce. To use SSO (Okta) are we able to use same SSO login to both environments? Because email address to my knowledge has to ...
1
vote
1answer
40 views

Is Custom Domain required in SF when implementing SSO where SF is the Service Provider?

I think My Domain is only required when SF is the IdP of a SSO solution and not strictly required when SF is the Service Provider.
1
vote
1answer
39 views

Salesforce SSO appending user id to the user name

I'm trying to setup sp initiated SSO with salesforce as the iDP. The service is expecting the username to be in the response but salesforce is sending the org id appended to the user name so instead ...
0
votes
1answer
45 views

Outbound SSO in Salesforce with telephony system

Can somebody tell me how to do single sign on in salesforce and third party telephony service? i want to login in my salesforce with my username and password but to sign in telephony i need username ...
0
votes
1answer
16 views

Is it possible to use a Connected App in Customer Community?

I have researched Salesforce documentation and found out that it is possible to enable Salesforce as an identity provider. Then you can create a Connected App, and do the proper configuration in ...
0
votes
1answer
120 views

Single Sign-On Marketing Cloud with ADFS as Identity Provider [closed]

Recently, I have configured SSO with ADFS for the Service Cloud and now I am trying to achieve the same thing for the Marketing Cloud. However, I do not want Salesforce Service Cloud as Identity ...
0
votes
0answers
29 views

Marketing Cloud metadata

Where can we obtain Marketing Cloud metadata? I am configuring SSO and my Identity Provider has shared their metadata that I have configured and created a key. Next they have requested my metadata too....
0
votes
1answer
37 views

Could Delegated Authentication be considered SP or IdP initiated SSO?

I understand that "Delegated Authentication" (DA) is a unique SSO option specific to the SFDC platform. Can we think about DA as non-SAML SP or IdP initiated SSO? Could DA ever be considered "...
0
votes
0answers
54 views

Using Okta SSO and Auth Provider with Named Credentials

I've got Okta SSO and a Auth Provider that generate tokens which works pretty well, except that after 1 hour the tokens start to expire. Rather than adding additional app logic to manage token refresh ...
0
votes
1answer
109 views

Getting error “No access: User was a portal user” Social Log-In when logging with Facebook SSO

I have been following this trailhead to allow users login in a community using facebook: https://trailhead.salesforce.com/en/modules/identity_external/units/identity_external_social I dont want them ...
1
vote
1answer
340 views

Enable SSO for Salesforce Marketing Cloud

I need to enable Single Sign On for Salesforce Marketing Cloud account where Identity Provider will be a third party and Marketing Cloud will be the Service Provider. I already got SSO Metadata ...
0
votes
0answers
18 views

Does OAuth in Salesforce Communities need Just-In-Time?

I need to implement OAuth authentication for a Salesforce Community and I'm not quite sure how Just-In-Time works for this protocol. Its quite clear that using SAML we can use JIT to create the ...
1
vote
1answer
58 views

Single Sign On Marketing cloud via Ws02

We are trying to enable SSO for our Marketing cloud users. We are enabling sso via WS02 and not using Service cloud as the Idp. in MC, We have created the key and enabled SSO for users. Marketing ...
0
votes
1answer
19 views

Salesforce link with SSO

We have put together an ADFS SSO system and have configured our SF org for it. We have a login site which users can go to, choose a system to login to, and are automatically logged in. It works fine ...
2
votes
0answers
22 views

Can Social Logon be used directly from a native mobile app?

We have a Customer Community with Facebook and Google set up as Auth Providers. In addition, we have a mobile app that connects to Salesforce using OAuth towards this community. This all works fine. ...
3
votes
1answer
299 views

SSO: Enable Multiple Configs - considerations

In our Salesforce Org, our internal users sign on via Single Sign On in our Identity Provider, Okta. We are looking use Okta for our partner community users as well, and to do so, we need to add a ...
1
vote
1answer
112 views

Sales Force Marketing Cloud Entity ID

For the SSO setup for SFMC Exact Target, where to find the Entity id . Followed this document to create SSO meta data https://help.salesforce.com/articleView?id=mc_overview_create_salesforce_saml_key....
0
votes
1answer
55 views

What does Third Party SSO login type mean?

I just got an email to verify my identity with an verification code, but I wasn't trying to log in to salesforce at that moment. I looked at the login history and the attempt was from my IP address ...
1
vote
1answer
130 views

SSO for an existing Community User with JIT fails if Contact Email address is updated

While I am still trying to figure if this is a Salesforce bug or an issue with the documentation itself, or if I am missing something here, thought of getting some opinion here as well, if anyone has ...