Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
8
votes
1answer
16k views

How do I configure AD FS 3.0 to support Salesforce SSO, especially with Salesforce1?

We are trying to configure AD FS to properly support SSO, particularly with Salesforce1, so our users only need to remember one login. There doesn't seem to be any documentation on how to correctly ...
14
votes
2answers
4k views

My Domain Gotchas?

I'm looking to setup My Domain as part of setting up SSO with OKTA. Since deploying My Domain is one of those irrevocable features it always make me a little concerned that it may inadvertent affects ...
2
votes
1answer
3k views

How can I get free or trial ExactTarget instance

How can I get free or trial ExactTarget instance. I need to do ExactTarget SAML2.0 Single Sign-On connector development, integration and testing. Is there any step by step documentation available so ...
1
vote
1answer
170 views

Marketing Cloud Download Metadata for Single Sign-On (SSO)

In the Single Sign-On documentation, it states there is a Download Metadata link available to retrieve metadata needed to setup SSO. I don't see this anywhere in the Security Settings in Admin. ...
13
votes
2answers
7k views

How does Delegated Authentication and Federated authentication work in parallel?

This is a follow up question to this question here. According to the answer to that question, it is possible to use Federated Authentication and Delegated Authentication in parallel. I'd like to ...
23
votes
3answers
38k views

How does a user with SAML SSO get redirected to IDP login page?

Question When SSO has been configured for SAML 2.0 and a user's federation identifier has been populated, how do they get redirected to the Identity Provider's login page? Background I'm working to ...
8
votes
1answer
2k views

Federated Authentication for mobile CRM products

We have implemented Federated Authentication for SSO in an organization. But now we want to use SSO for the Salesforce mobile CRM app. According to this article, Federated Authentication does not ...
2
votes
1answer
911 views

Enable SSO for Salesforce Marketing Cloud

I need to enable Single Sign On for Salesforce Marketing Cloud account where Identity Provider will be a third party and Marketing Cloud will be the Service Provider. I already got SSO Metadata ...
9
votes
1answer
8k views

How to setup salesforce to force users to use SSO for salesforce authentication (and disable sfdc credentials)

Need to setup salesforce sso, so that users have to use SSO to login, but cannot use standard login.salesforce.com to login. Not able to setup how to prevent login from the standard page with ...
13
votes
1answer
1k views

Is it possible to use Facebook SSO with portal users?

I know you can use Facebook as an identity provider but it seems to be limited to "regular" users. Can you also use Facebook as an identity provider in the portal? How does it match back to a user ...
7
votes
1answer
1k views

Basic SSO concepts and how Salesforce fits in

I'm struggling to understand basic Single Sign-On concepts and how to design a Salesforce implementation. I want Salesforce to be the "master" user directory among various "child" external apps. ...
4
votes
1answer
7k views

How to integrate external web app?

After reading Force.com Canvas Developer's Guide, I don't think I have figured out a good way to integrate an external web app inside salesforce.com. Following are questions that I am not sure about. ...
5
votes
2answers
3k views

Salesforce Auth Provider with Facebook SSO

After 3 and a half days of reading through documentation and trial and error, I have come to a point where I am just stuck trying to make it so Community Users and/or normal Users can log into a ...
5
votes
1answer
4k views

Why does OAuth2 authorization endpoint redirect to callback URL as if it were the SAML IdP?

This is all a proof-of-concept in a sandbox; maybe something I'm doing is not supported in sandboxes. Our org is set up with SAML2-based SSO and that works well. Now I'm trying to use a REST API and ...
0
votes
1answer
192 views

How to bypass login page in URL redirects after SSO setup

After SSO is set up, when I tried to redirect the user to the second Salesforce org, it takes the user to login page. Do I have to do any more authentication before redirection? my controller is below....
8
votes
4answers
580 views

Mismatch in Links recieved through email alerts and User getting redirected to home page

We have a case where our users create tasks. When they create tasks, they also check the "Send Email Notification" checkbox present on the task. As a result the owner of the task, receives an email ...
5
votes
1answer
2k views

Is it possible to use SSO with Dataloader?

I'm trying to determine what SSO scenarios are supported with Dataloader via both the GUI and the CLI. GUI (Graphical User Interface) Does Dataloader GUI work with SAML? Does Dataloader GUI work ...
4
votes
1answer
2k views

How to add custom fields to SAML response?

In the scenario where Salesforce is configured as Identity Provider, how can the SAML assertion returned to authenticating Service Providers be modified to include additional attributes? I cannot see ...
4
votes
1answer
210 views

Automate setup of an external identity provider via APIs

I use the Financial Force Metadata API Apex Wrapper to simplify an app setup using a custom UI. Part of the setup is the creation of a Self-Signed Certificate and its usage in a Single Sign-On Setting....
3
votes
1answer
486 views

SSO of a force.com site with another force.com site in same org

Org has 2 customer portals/sites e.g. abcd.secure.force.com/xxxx abcd.secure.force.com/yyyy Most users have access to both portals, users have same set of credentials for both of the portals. If ...
3
votes
1answer
410 views

JanRain Login Salesforce

Can't we use JanRain for Community Users log-in. I am getting error as "AuthorizationError?ErrorCode=NO_ACCESS&ErrorDescription=User+was+a+portal+user" The custom log-in page is working for ...
3
votes
2answers
95 views

Let external system modify Salesforce data on behalf of logged in user

I am going to build a native Salesforce app (Managed package) that will be installed in many subscriber orgs. The app will make callouts (eg. calling REST endpoint) to external Java app. The Java ...
2
votes
0answers
267 views

Salesforce as IdP for Aha.io - Single Sign-On Error: Invalid HTTP Method

I'm completely new to SSO, so please bare with me... I am trying to setup Salesforce as the IDP using SAML 2.0 for a third party application called Aha.io. I've followed this guide to Enable ...
2
votes
1answer
3k views

SAML not working, validator passes

We are setting up SSO with a custom SAML identity provider. The SAML validator passes just fine: But then when we try to login, we get: I can't see any error logs anywhere (login/history). The ...
2
votes
1answer
3k views

SAML SSO: Unable to import certificate via Java Keystore file (JKS)

I need to configure Single Sign On based on SAML 2.0 including encryption. Life would be easy if salesforce would allow import of the Identity Provider meta information XML that includes certificates ...
1
vote
1answer
1k views

User getting redirected to home page on Single sign on

We are implementing SSO in our Org. This works fine. However, we have set an email alert which notifies user when a record of a certain object is created. In this email alert, we provide the user with ...
1
vote
1answer
89 views

Need help on Salesforce Login Discovery using My domain

requirement- When user enter username then it will redirect to SSO setup in salesforce and if user entered correct details then second sso needs to get called and if user enter correct credentials ...
1
vote
1answer
1k views

SSO with OAuth for Communities

Is it possible in Salesforce to provide a link on VF in the Customer portal so that once the portal user logged in and clicks on that link they should be redirected to the Community Home Page?
1
vote
1answer
3k views

How do I bypass Salesforce login to do SSO with Identity Provider

I am integrating an ASP.MVC site with Salesforce. The front end is an existing ASP site with iframes in some places that lead to Salesforce. ASP side is also the Identity Provider. I have set up ...
0
votes
1answer
27 views

Salesforce as identity provider - SAML authentication request fails

I'm trying to do a login using Salesforce as IDP. I have the certificate uploaded in setup->apps->connected apps->manage connected apps I have also checked "Verify request signature". The strange ...
0
votes
1answer
263 views

2 Factor Authentication is not being triggered with Single Sign On (OpenID Connect)

Testing SSO against Azure AD using openId connect per this developer.force.com documentation Two-factor authentication is already configured and functions properly for username + password login. ...
0
votes
0answers
46 views

Marketing Cloud metadata [duplicate]

Where can we obtain Marketing Cloud metadata? I am configuring SSO and my Identity Provider has shared their metadata that I have configured and created a key. Next they have requested my metadata too....
0
votes
1answer
352 views

Create record on behalf of another user

In our custom portal we would like to offer users to create new records in SalesForce database without leaving the portal. Is it somehow possible to create these items by admin and just specify the ...