Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
0
votes
1answer
364 views

What does Third Party SSO login type mean?

I just got an email to verify my identity with an verification code, but I wasn't trying to log in to salesforce at that moment. I looked at the login history and the attempt was from my IP address ...
-1
votes
1answer
532 views

Users need to login using External Authentication Provider [duplicate]

I have a requirement where users need to log in to salesforce using external authentication provider. The configuration in Open-id authentication. I have created the connection in Auth.Providers along ...
0
votes
0answers
14 views

How to set up salesforce community SSO with GO (Drupal) as Identity Provider using HMAC? [closed]

We have a site hosted on the Drupal Go platform, and now we want to implement the same in the salesforce community for our existing users. Every user has an associated GO id with it. We want to set up ...
1
vote
1answer
27 views

How Do I Enable SAML IdP in a Customer Community?

Our Client need to setup an SSO for their customers from the Salesforce Customer Community portal into another web application using SAML. We are familiar with enabling Salesforce as an IdP for ...
0
votes
1answer
728 views

Salesforce Integration with C# with SSO

I have a requirement to enable SSO for a excel add-in application to salesforce. Currently we are using sfdc user name and password while connecting to salesforce from excel add-in. Now the ...
0
votes
1answer
378 views

How to bypass login page in URL redirects after SSO setup

After SSO is set up, when I tried to redirect the user to the second Salesforce org, it takes the user to login page. Do I have to do any more authentication before redirection? my controller is below....
3
votes
1answer
2k views

Dynamically adding custom attributes to SAML response

I've implemented Single Sign On with Salesforce as Identity Provider scenario using SAML. I want to pass additional attributes via SAML response to the Service Provider. Out of the box the Connected ...
0
votes
1answer
372 views

Community SSO Buttons outside of /login

BACKGROUND When adding multiple IdP providers for SSO, the default /login page of an SFDC-based Community (screenshot below) would prompt the user to select an IdP from which to login. Clicking any ...
0
votes
1answer
36 views

SSO and User Provisioning From External WebApp into Salesforce Community

Scenario - customer is logged into our web app, they click on create a ticket and are redirected to the salesforce community page as a user in salesforce with the same email as the web app, want to ...
0
votes
0answers
20 views

Redirect from sub-sub-domain to MyDomain

Hello I have set up the following redirect Custom sub-sub-domain URL -> My Domain And this didn't work. It did not redirect to our My Domain page, but instead it redirected to a cs32.salesforce.com ...
2
votes
1answer
598 views

Best practice for new user notification when using Federated SSO

When new users are provisioned in SFDC from the standard UI, there is a checkbox for "Generate new password and notify user immediately". This sends an email to the new user with all his/her info. ...
2
votes
1answer
3k views

SAML SSO: Unable to import certificate via Java Keystore file (JKS)

I need to configure Single Sign On based on SAML 2.0 including encryption. Life would be easy if salesforce would allow import of the Identity Provider meta information XML that includes certificates ...
3
votes
1answer
62 views

Redirecting to MyDomain URL

We set up SSO with Auth.Provider in Salesforce. We deployed My Domain and linked the auth provider to it. When a user navigates to the My Domain URL, they are automatically redirected to the auth ...
1
vote
1answer
710 views

External website in iframe

We currently have requirement to show external website in iframe. External website users will have user name and password and salesforce user name and password as well.As part of the authentication i ...
0
votes
2answers
34 views

Keep User Logged In When Using SSO in Communities

We have a Salesforce Customer Community site built with Aura components with many customizations. The landing page is public so doesn't require any authentication. However, if it detects user is not ...
0
votes
1answer
431 views

Does Salesforce support IdP-initiated SAML when Salesforce is acting as the IdP?

I am trying to setup Salesforce Communities as a SAML IdP for our application following the procedures here: https://developer.salesforce.com/page/Salesforce_IdP_Setup amongst other supporting ...
0
votes
1answer
45 views

oauth infinite redirect loop during authorization

This problem has occurred in a few of our applications that use the same forms of salesforce oauth authentication. When you first navigate to mywebsite.com, it sends you to salesforce to login, once ...
2
votes
1answer
36 views

Disabling Direct Login

For the past couple months our team has been working to enforce SSO only authentication via OKTA. We've played around with a couple ideas ranging from delegated authentication, federated ...
1
vote
1answer
31 views

Single Sign On - Mobile App

We have configured SSO through Azure. Conditional access policy token for this application is configured for 24 hours. Application timeout is set for 2 hours. The Mobile App stays connected as ...
2
votes
1answer
38 views

SAML - Triggering Single Logout (SLO) when session times out at the identity provider

Let's say I have Saleforce set up as an Identity Provider with a session timeout of 15 minutes. I set up a connected app with SAML and SLO. I use SSO to access a connected app and start working only ...
2
votes
1answer
2k views

Enable SSO for Salesforce Marketing Cloud

I need to enable Single Sign On for Salesforce Marketing Cloud account where Identity Provider will be a third party and Marketing Cloud will be the Service Provider. I already got SSO Metadata ...
0
votes
0answers
29 views

Salesforce community login from different website without SSO [duplicate]

I would like community users to login to salesforce community from the company website (via click) without SSO. is there a way to achieve this? For salesforce login (not community) I know there is a ...
1
vote
1answer
47 views

SSO SAML + Embedded Login

I'm not finding useful documentation for this scenario Salesforce is set as IDP (identity provider) There are some SP (Service providers, web app) Is implemented a SSO using SAML Is asked to ...
0
votes
0answers
10 views

Is it possible to login in Salesforce Mobile App via a site page (to submit credential) which is calling OKTA for authentication?

Is it possible to login in Salesforce Mobile App via a publicly available site page (to submit credential), which is calling OKTA for authentication in behind via soap call and redirect to Salesforce ...
4
votes
1answer
475 views

Why would I use the “Existing User Linking URL” in an Authentication Provider

The authentication provider documentation provides a fairly good description for what the 'Existing User Linking URL' does, but I do not understand the context for where and when this URL would be ...
0
votes
0answers
32 views

How to pass custom/dynamic request parameter to salesforce single sign on initialization url?

I am working on implementing single sign on using Salesforce Auth. Providers. I am integrating it with IdentityServer 4 using Open ID connect method. I have need to pass additional "launch" request ...
0
votes
0answers
18 views

Single SSO for Community and Salesforce Application

I already have a SSO enabled for my Salesforce Application and We have created new Community and need to enable the SSO for the community. Can i update and use the same Configuration for SSO for both ...
1
vote
2answers
336 views

Salesforce (as IdP) returns error response to every SAML Single Logout request

I'm having trouble getting Salesforce SAML single logout (SLO) working. I'm writing a web application that uses Salesforce as the SAML Identitiy Provider (IdP) Every LogoutRequest I send gets a ...
3
votes
0answers
57 views

Salesforce Marketing Cloud Single Sign On - Azure

We are currently attempting to carry out the set-up of the Single Sign On functionality for Salesforce Marketing Cloud, however when trying the two different ways of setting it up we are receiving the ...
0
votes
0answers
19 views

Manage multiple profiles for community users

I am trying to enable Social Sign-On for a community. I am currently using Facebook & able to register/ login with that. In the community, we need to provide different types of users like students,...
5
votes
0answers
165 views

SSO between Salesforce - Mobile app - web service provider

I'm trying to understand if it's possible to maintain a SSO session between 3 different elements: Mobile APP (Android/IOS) - developed with Salesforce SDK Salesforce (Identity provider) Web service ...
1
vote
1answer
45 views

How to pass relaystate parameter from salesforce community to Azure

I am enabling SAML2.0 Authentication for Salesforce community users. During Authentication I want to pass Relay state parameter dynamically to Azure(IDP) so that users can navigate to a different ...
5
votes
1answer
1k views

Salesforce as IdP with ADFS 2.0

I’m trying to use the free developer edition (http://developer.force.com/) of and setup a demo SAML Idp for testing with my ADFS 2.0 + SP. So far I’ve managed to enabled SAML support, and created a ...
0
votes
1answer
86 views

What is “Request Signing Certificate” used for?

Does anyone know what this certificate is used for? We use Okta as IDP and the SSO work well even though I didn't upload this certificate into Okta.
4
votes
2answers
443 views

How to process AD security groups with Just-in-time User Provisioning?

I want to auto-assign permission sets based on a user's membership in various security groups in Active Directory ("AD"), during the Just-in-Time user provisioning process. I understand that this ...
0
votes
1answer
717 views

Single sign on login Issue

I have SSO login failure.Can anyone help me to know about timestam issue Checking that the timestamps in the assertion are valid Current time is after notOnOrAfter in Conditions Current ...
5
votes
1answer
629 views

Touch.salesforce.com + SSO + Mobile App setup for SSO

I have done SSO using the federated way using ADFS and this is working fine on the desktop browser, my client has the requirement that if this is done then users should be able to login in to the ...
3
votes
1answer
410 views

Community login without redirecting user to Salesforce with SSO or OAuth

We are building a Drupal site for one of our customers. Our customer wants to use the Salesforce self-registration and community login features for authenticating their customers to the CMS. As far ...
0
votes
0answers
21 views

Custom Auth Provider 503 Error

I have implemented a custom auth provider as part of the single sign on flow for Salesforce communities. Most of the flow is working correctly. I am able to get the authorization token, access token ...
1
vote
1answer
2k views

OpenID Connect login returns No Oauth Token & Empty Response

Trying to create an OpenID Connect provider in my app to provide SSO into SF. I'm using a python library: pyoidc. However, I keep getting redirected to an error URL... https://na10.salesforce.com/...
1
vote
1answer
23 views

SSO using multiple FederationID values

My client has asked to configure SSO using FederationID. When client login to the other application, they use either EmpID, userName, emailaddress for authenticating. My issue is when client tries to ...
1
vote
0answers
35 views

Salesforce SAML Assertion flow via REST API for Lightning Out

Context: We want to log a user into a Lightning Out App hosted on an Azure AD System using the SAML Assertion flow. What we have establisched so far: We have a functioning connection for our ...
2
votes
1answer
20 views

Does SSO using Federated Authentication respect org-wide password policies?

We have Federated Authentication implemented for our SSO and therefore a separate set of password policies are being applied from the client app. I found this SF article but it is only referring to ...
5
votes
1answer
436 views

Specific differences between Federated Authentication with SAML compared to OpenID Connect Auth Provider for SSO to SFDC

I've successfully tested SSO against Azure AD / O365 using the approach illustrated on this developer.force.com post, which uses an Auth Provider and the OpenID Connect Provider Type. However I see ...
0
votes
0answers
23 views

“Embedded Login” Login Button is not displaying in Chrome Proper only

I attempted a Salesforce Embedded Login test by deploying the Heroku "embedded-login-example" github project (https://github.com/salesforceidentity/embedded-login-example/blob/...
2
votes
1answer
724 views

SP-initiated and IdP-initiated SSO lands on different landing page

I have SAML based SSO authenitcation set in Salesforce. SSP Initiated and IDP initiated SSO lands on different landing pages. I am aware that relay state parameter would decide the landng page for ...
1
vote
0answers
51 views

Authenticate Community Users in External Rest API

I have a Community that consumes an external Rest API that requires authentication. For testing purpose, I hardcoded a username and a password in my apex rest callouts in order to be able to consume ...
1
vote
1answer
659 views

Setup SSO Salesforce Commerce Cloud

I just wanted to know if it is possible to setup SSO for Salesforce Commerce Cloud (Demandware) using Okta? Is it some thing OOB feature of Salesforce Commerce Cloud (Demandware) or need to do some ...
0
votes
0answers
20 views

Extract specific Information from SAML error response when try to login Salesforce from an IDP

Do we have a way to extract the Username or email for a user when trying to login to Salesforce from an Identity Provider(Not Salesforce as the Identity Provider)? I have a use-case to show a custom ...
0
votes
1answer
475 views

How to get Access token when SSO enabled for Salesforce(LDAP)

We have Integrated with LDAP(Ms Active Directory) for SSO in our Salesforce org and It is working fine in web browser means when we login using ldap credentials, it is redirecting to salesforce ...

1 2 3 4 5 9