Episode #125 of the Stack Overflow podcast is here. We talk Tilde Club and mechanical keyboards. Listen now

Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
23
votes
3answers
38k views

How does a user with SAML SSO get redirected to IDP login page?

Question When SSO has been configured for SAML 2.0 and a user's federation identifier has been populated, how do they get redirected to the Identity Provider's login page? Background I'm working to ...
15
votes
2answers
4k views

My Domain Gotchas?

I'm looking to setup My Domain as part of setting up SSO with OKTA. Since deploying My Domain is one of those irrevocable features it always make me a little concerned that it may inadvertent affects ...
15
votes
1answer
614 views

Disable multiple username hints without disabling “Remember Username”?

In the current release, Salesforce released the multiple username hint "enhancement". This causes two showstopper issues: if a username has an apostrophe in it, the "pick a username" screen where you ...
13
votes
2answers
8k views

How does Delegated Authentication and Federated authentication work in parallel?

This is a follow up question to this question here. According to the answer to that question, it is possible to use Federated Authentication and Delegated Authentication in parallel. I'd like to ...
13
votes
1answer
1k views

Is it possible to use Facebook SSO with portal users?

I know you can use Facebook as an identity provider but it seems to be limited to "regular" users. Can you also use Facebook as an identity provider in the portal? How does it match back to a user ...
12
votes
3answers
1k views

remove advertising on login page of Salesforce

I have SSO set up and it looks great. However, I get a number of "ads" on the right hand side of the login page. Is it possible to remove those adds without visualforce. I like the way the current ...
9
votes
1answer
8k views

How to setup salesforce to force users to use SSO for salesforce authentication (and disable sfdc credentials)

Need to setup salesforce sso, so that users have to use SSO to login, but cannot use standard login.salesforce.com to login. Not able to setup how to prevent login from the standard page with ...
8
votes
1answer
16k views

How do I configure AD FS 3.0 to support Salesforce SSO, especially with Salesforce1?

We are trying to configure AD FS to properly support SSO, particularly with Salesforce1, so our users only need to remember one login. There doesn't seem to be any documentation on how to correctly ...
8
votes
1answer
3k views

Enabling Single Sign-On for Sites using Salesforce as the Identity Provider

I was wondering if anyone has had success in trying to enabling single sign-on for sites using salesforce as the Identity Provider. https://login.salesforce.com/help/doc/en/sso_sites.htm I have used ...
8
votes
4answers
582 views

Mismatch in Links recieved through email alerts and User getting redirected to home page

We have a case where our users create tasks. When they create tasks, they also check the "Send Email Notification" checkbox present on the task. As a result the owner of the task, receives an email ...
8
votes
1answer
2k views

Federated Authentication for mobile CRM products

We have implemented Federated Authentication for SSO in an organization. But now we want to use SSO for the Salesforce mobile CRM app. According to this article, Federated Authentication does not ...
8
votes
2answers
3k views

IdP Initiated SSO - modify SAML request based on context

We have setup SFDC as the IdP for SAML 2.0 based SSO with a third party web application called, say, ACME. The use case is thus: User navigates to a Contact record User clicks on custom button User ...
8
votes
2answers
601 views

How to delete SSO information?

I have implemented the auth. provider SSO from Facebook. When I disable a user, I want to delete at the same time the authentication information of Facebook(ex. Third-party account link in User ...
7
votes
1answer
8k views

Single Sign-On from Google to Salesforce

Considering one of my client is using Google Apps and Salesforce, I think it would be a lot simpler for the users to login to Salesforce using Gmail interface, with Single Sign-On / OAuth. I read on ...
7
votes
1answer
1k views

Get user's info on login into Salesforce org with OpenID Connect

As per the winter'14 feature OpenID Connect, I have successfully logged-in salesforce but I not getting enough user information like I was able to do in Facebook auth. While facebook auth provided a ...
7
votes
1answer
1k views

Basic SSO concepts and how Salesforce fits in

I'm struggling to understand basic Single Sign-On concepts and how to design a Salesforce implementation. I want Salesforce to be the "master" user directory among various "child" external apps. ...
7
votes
1answer
2k views

Salesforce as identity provider do not provide SSO for partner and customer users in community

I have setup a community with some customer and partner users using a developer account. I have also enabled Salesforce as an identity provider (IdP). In the community login page, I added a login ...
7
votes
1answer
446 views

Customer Portal/Knowledge with integration ASP.NET

I normally work on an ASP.NET site, which has its own ASP.NET Membership and profiles. Salesforce was introduced to the company to provide a CRM. Initially the member profiles that the site creates ...
6
votes
3answers
599 views

Google Apps & Salesforce - SAML SSO

If I'm using Salesforce as the Identity Provider to log in to my Google Apps email, what happens when Salesforce wants to verify my identity by emailing a login verification code? As I think about it:...
6
votes
1answer
15k views

Error while using Single Sign-On with OpenSSO

I am trying to use salesforce federated single signon feature. I am using Glassfish server and OpenSSO 8.0 While logging in using OpenSSO, I am getting the following error: Login Error Your login ...
6
votes
2answers
10k views

Enabling SAML SSO: where is the “Use Single Sign-On” permission?

We've set up Single Sign on with SAML. Our IdP is OneLogin and using their link, we are able to connect. We now want to disable password login for some users in Salesforce. Salesforce's documentation ...
6
votes
1answer
1k views

SSO setting while migrating from Partner Portal to communities

We are planning to migrate from partner portal to community. In the current functionality users are able to login from an internal portal to salesforce as the SSO is configured. I read thru the ...
6
votes
1answer
535 views

How to retrieve the error description and details for Just-in-Time Provisioning errors for SAML

Usually the errors are returned in the URL parameters of the error page. Since I've created a custom page to be redirected when a SAML error (portal user login) occurs, I would like to display the ...
5
votes
1answer
608 views

My Org SSO refers me to home page, no deep linking

In my company we set an SSO for salesforce, works good Yet - when user clicks a link he is always being directed to the Home page (or his default tab) if he is not already connected to SF. Can you ...
5
votes
2answers
2k views

Data flow for SAML based SSO with salesforce for outlook

We are planning to implement SAML based SSO for our salesforce org. Salesforce will be a service provider. We are also using Salesforce for Outlook plugin. Can anybody explain how username and ...
5
votes
1answer
2k views

Is it possible to use SSO with Dataloader?

I'm trying to determine what SSO scenarios are supported with Dataloader via both the GUI and the CLI. GUI (Graphical User Interface) Does Dataloader GUI work with SAML? Does Dataloader GUI work ...
5
votes
2answers
2k views

SSO Implementation - Any IDP Simulator available?

I am planning a SSO implementation using SAML 2.0. It is going to be SP (Force.com) Initiated authentication. I wanted to know if any SSO IDP simulator is available from AppXchange (preferred over ...
5
votes
1answer
1k views

What is the difference between 2048 and 4096 key size?

We are using a Self-signed certificate for our SSO with 2048 key size (which we are generating from Salesforce). I understand that this will only last one year. If we switch to 4096 key size, what ...
5
votes
1answer
4k views

Why does OAuth2 authorization endpoint redirect to callback URL as if it were the SAML IdP?

This is all a proof-of-concept in a sandbox; maybe something I'm doing is not supported in sandboxes. Our org is set up with SAML2-based SSO and that works well. Now I'm trying to use a REST API and ...
5
votes
1answer
212 views

Is SAML based login possible with older integrations that use the old SOAP based login?

We are using SAML based federated authentication in our org which works just fine. We have however a company specific desktop client application written some years ago in Java that, among other ...
5
votes
2answers
3k views

Salesforce Auth Provider with Facebook SSO

After 3 and a half days of reading through documentation and trial and error, I have come to a point where I am just stuck trying to make it so Community Users and/or normal Users can log into a ...
5
votes
2answers
2k views

Google SAML Error

I'm testing SSO with Google as the IDP into a sandbox. The button appears on the sandbox log in page, but when I use it, I cannot login to the sandbox. Here is the log result: Results Last ...
5
votes
1answer
901 views

File size certificate limitations for setting up Saml Single Sign on

I am having trouble loading a certificate (base64 encoded). See the picture below. When I load it, it has the following errors: "Error: Certificate file too large". Are there any known ...
5
votes
2answers
11k views

SSO: IdP initiated works but SP-initiated does not redirect to IDP ADFS - suggestions?

I am setting up SSO and have an issue with the service-provider initiated flow SAML use case. The IdP is ADFS. The SAML Idp Initiated SSO is working but SAML SP-initiated SSO flow doesn't seem to ...
5
votes
4answers
1k views

Can portal users be authenticated with a connected app?

I saw a webinar http://www.youtube.com/watch?v=_MsKJs23W3I on social sign on. Is it possible for user which registered using facebook or janrain to login and use Connected apps?? Or social sign on ...
5
votes
1answer
2k views

SP-Initiated SSO failure for complex relayStates

We have configured SAML 2.0 Federated SSO with Salesforce.com. The IdP setup is CA Federation Manager and LDAP. The configuration works perfectly for IdP-initiated login and SP-initiated login with ...
5
votes
1answer
203 views

Just in Time SSO

We are implementing a Just in Time Federated SSO for which we are sending full base64 encoded SAML response under which we have all the data elements in Pass through data. Can salesforce parse that ...
5
votes
1answer
346 views

How to intercept/hook into oauth flow

After a user authenticaes in our Org using the SSO oauth flow, and after the access token is created, we would like to hook into that flow to get that access token and set a couple of cookies. Is ...
5
votes
1answer
847 views

My Domain: Why prevent login from login.salesforce.com?

I'm setting up My Domain with OKTA and was curious about the option to prevent login from login.salesforce.com. The documentation doesn't have much on this option and couldn't figure out why I'd want ...
5
votes
1answer
686 views

Salesforce SSO and SimpleSAMLphp - not redirecting to startURL on logon

I am using SimpleSAMLphp as an Idp and Salesforce as the Sp. I have it working so that I can go to the Salesforce login page and use the additional button to logon using SSO, as per step 1 in this ...
5
votes
1answer
395 views

Using LinkedIn for social login to salesforce

so i have been looking for solutions all over the web to try and find the solution to this simple question: how do i use linkedin as a social login method for any salesforce app/portal/community i ...
5
votes
0answers
97 views

SSO with Environment Hub: do hub-users still need to know the member-org-user's password to use API tools like eclipse, ANT or dataloader?

I've configure SSO with Environment Hub for a DE linked to our Hub. It works: hub-org-users can login without knowing the password on the mapped member-org-users. So far, so good. Now do I need to ...
5
votes
1answer
1k views

How to create a force.com project in a SSO environment

I'm new to Salseforce and trying to get my eclipse Force.com IDE environment setup. Install went fine. My problem is in correctly specifying my credential for a project. My company uses SSO, so ...
5
votes
1answer
1k views

Salesforce as IdP with ADFS 2.0

I’m trying to use the free developer edition (http://developer.force.com/) of and setup a demo SAML Idp for testing with my ADFS 2.0 + SP. So far I’ve managed to enabled SAML support, and created a ...
5
votes
1answer
52 views

users going to error page rather than instance version of a record

I'm implementing SSO with SAML in our org. I'm thinking about a case where a user is not set up for SSO in SF gets a link begining with my domain. since their federation id is not entered, they ...
4
votes
1answer
1k views

How Do You Enable SAML IdP in a Partner Community?

I am helping a client that needs to connect their partner portal, a Salesforce Partner Community. They need to setup an SSO for their partners from the partner portal into another web application ...
4
votes
1answer
3k views

Auth Provider + Communities

I'm trying to sign into a community via Auth Provider from an external org. I've set the Auth provider in my organization and my community too. Doing as the documentation says: Using the community URL ...
4
votes
1answer
2k views

How to add custom fields to SAML response?

In the scenario where Salesforce is configured as Identity Provider, how can the SAML assertion returned to authenticating Service Providers be modified to include additional attributes? I cannot see ...
4
votes
1answer
7k views

How to integrate external web app?

After reading Force.com Canvas Developer's Guide, I don't think I have figured out a good way to integrate an external web app inside salesforce.com. Following are questions that I am not sure about. ...
4
votes
1answer
553 views

User session lifetime tracking?

We are building a multiplatform architecture application in which we have an authentication consideration we're not finding a solution to. We have a front end platform which has SSO with Force.com ...