We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
0
votes
0answers
10 views

AuthConfiguration getSamlSsoUrl method return link doesn't work

So I have the method getSamlSsoUrl(communityUrl, startURL, samlId) from the class AuthConfiguration and returned a very long url with saml id, saml acs, saml binding type, and etc in the url. However,...
0
votes
0answers
35 views

SSO via SAML - avoid a step of clicking on a button corresponding to identity provider on the login screen

There are certain users in the org that have only SSO, as in they don't have a salesforce password set up. Is there a way to send these users a link they can bookmark that directly goes to the step ...
0
votes
0answers
23 views

SSO via Azure as an auth provider - avoiding errors in registration handler

I am trying to SSO into Salesforce via auth provider (Azure). It works when I log in for the first time, but afterwards [Third-Party Account Link] record will be created and the following error will ...
5
votes
2answers
3k views

Salesforce Auth Provider with Facebook SSO

After 3 and a half days of reading through documentation and trial and error, I have come to a point where I am just stuck trying to make it so Community Users and/or normal Users can log into a ...
0
votes
1answer
37 views

Salesforce SSO with multiple identity providers

Is it possible to configure multiple ADFS and Azure AD on a single Salesforce org for enabling SSO with multiple identity providers
1
vote
1answer
31 views

Do SSO users need to have a password already?

This is basically for confirmation, but I might be wrong. If I'm trying to get certain users to use SSO only, I don't need to have them set up a Salesforce password correct? I'm under the impression ...
2
votes
1answer
392 views

Username-Password Oauth vs SAML for Salesforce

I am using Username-Password flow to display our Salesforce data to people who visit our website. I am looking for more secure way to display the data without people without Salesforce credentials to ...
0
votes
1answer
365 views

Users need to login using External Authentication Provider

I have a requirement where users need to log in to salesforce using external authentication provider. The configuration in Open-id authentication. I have created the connection in Auth.Providers along ...
5
votes
1answer
108 views

Authorize Apex Rest API call using an Azure token

I'm new to the OAuth concept in Salesforce and looking for some pointers for my use-case. I'm not even sure if I'm framing my question correctly, but I'm trying to understand if I can invoke an Apex ...
0
votes
0answers
34 views

SSO to third app from Salesforce using Azure AD

We've implemented a SSO to Salesforce using Azure AD. This SSO works. From internal Salesforce we want to do a SSO to a Document Management System. We've implemented the SSO using Azure AD to this ...
0
votes
1answer
351 views

How to prevent auto login (using auth provider) after logout from SF org?

My domain is setup. Auth provider is setup. For Authentication Configuration only Auth Provider is selected for Auth Service. When I go to https://mydomain.my.salesforce.com/ I'm presented with Auth ...
1
vote
0answers
103 views

Error: Invalid HTTP method in community SSO

Have set up my community SSO by referring Configure SSO Across Multiple Salesforce Orgs. After that when I try to login I am getting below error. Error: Invalid HTTP method I tried to have set up ...
0
votes
0answers
27 views

How to access the REST API with the user with Permission 'Is Single Sign-On Enabled' is enabled

I have created one RestResourc to give the ability to the external system to attach the Report to Asset in Salesforce. Now the problem I am facing is the user which I am using for Authentication ...
0
votes
1answer
667 views

Salesforce Integration with C# with SSO

I have a requirement to enable SSO for a excel add-in application to salesforce. Currently we are using sfdc user name and password while connecting to salesforce from excel add-in. Now the ...
4
votes
1answer
249 views

Automate setup of an external identity provider via APIs

I use the Financial Force Metadata API Apex Wrapper to simplify an app setup using a custom UI. Part of the setup is the creation of a Self-Signed Certificate and its usage in a Single Sign-On Setting....
0
votes
3answers
266 views

Can ADFS SSO work with delegated authentication?

currently we have ADFS SSO setup in our org and I would like prevent our users to login to Salesforce using the general login.salesforce.com link but we do not want to check the "Prevent login from ...
1
vote
1answer
633 views

External website in iframe

We currently have requirement to show external website in iframe. External website users will have user name and password and salesforce user name and password as well.As part of the authentication i ...
2
votes
1answer
578 views

Best practice for new user notification when using Federated SSO

When new users are provisioned in SFDC from the standard UI, there is a checkbox for "Generate new password and notify user immediately". This sends an email to the new user with all his/her info. ...
0
votes
1answer
401 views

Does Salesforce support IdP-initiated SAML when Salesforce is acting as the IdP?

I am trying to setup Salesforce Communities as a SAML IdP for our application following the procedures here: https://developer.salesforce.com/page/Salesforce_IdP_Setup amongst other supporting ...
0
votes
0answers
39 views

Registration Handler - determining which Auth Provider was used to sign in

We have many Auth Providers (all based on OpenID Connect) we are using to SSO into a Salesforce community. In order to add some logic to the Registration Handler that checks if a user already exists ...
3
votes
2answers
79 views

Custom authentication provider - retrieving a parameter from url in initiate() method

We have a working external identity provider SSO Oauth 2.0 with custom apex provider. (External app redirects to a specific SF community) We need to extend it to accept a custom parameter from the ...
0
votes
0answers
26 views

Login (Screen) flow for Custom Community Login Page

I have a salesforce community custom login page, using SSO and SAML enabled for federated single sign on. My implementation is similar to the approach mentioned here - https://help.salesforce.com/...
4
votes
1answer
425 views

Why would I use the “Existing User Linking URL” in an Authentication Provider

The authentication provider documentation provides a fairly good description for what the 'Existing User Linking URL' does, but I do not understand the context for where and when this URL would be ...
0
votes
1answer
33 views

SSO with Active Directory Federation Services (ADFS) 4.x

I'm trying to set up Single Sign-On for my customer between their on-premises AD and Salesforce (Sales Cloud). They are using ADFS 4.x. We followed SF instructions that were written for ADFS 3.x but ...
0
votes
1answer
194 views

Salesforce SAML Single logout

I have a single sign on functionality in my site with Salesforce as identity provider. I have a saml enabled connected app in Salesforce, also it was single logout enabled. I'm done with sign on, ...
1
vote
1answer
37 views

SSO with Salesforce and Azure AD - disable single logout

I've started playing with Salesforce and configuring SSO to work with our sandboxes. So far so good, and logins can happen without issue. However, I'm running into a bit of an issue when a user logs ...
0
votes
1answer
31 views

Can we avoid navigating to Azure Ad login screen when we configure SSO with Azure AD as ID provider

I have to configure Single Sign using Azure AD for our salesforce community as Identity provider and Salesforce being the service provider, I want to use Open id Connect. I want check with the forum ...
5
votes
1answer
1k views

Salesforce as IdP with ADFS 2.0

I’m trying to use the free developer edition (http://developer.force.com/) of and setup a demo SAML Idp for testing with my ADFS 2.0 + SP. So far I’ve managed to enabled SAML support, and created a ...
1
vote
1answer
81 views

Single Sign-On for Marketing Cloud

Using Single Sign-On for Marketing Cloud, how are the Marketing Cloud roles managed? From Marketing Cloud as a standard user or from Sales Cloud? I've never implemented it and after reading the ...
0
votes
0answers
39 views

Get acces token in salesforce

I have an hybrid app (1 part using Salesforce and another one using Java Spring boot). I'm making login on Salesforce by SSO but after login, I need to get the access token for the user and use it to ...
0
votes
1answer
533 views

Single sign on login Issue

I have SSO login failure.Can anyone help me to know about timestam issue Checking that the timestamps in the assertion are valid Current time is after notOnOrAfter in Conditions Current ...
1
vote
1answer
28 views

Why doesn't https://mydomain.my.salesforce.com/?login work when single signon is enabled?

The Best Practices and Tips for Implementing Single Sign-On states: System admins must always be able to log in to Salesforce, even if SSO is enabled for their accounts. For example, you need a ...
4
votes
1answer
620 views

Touch.salesforce.com + SSO + Mobile App setup for SSO

I have done SSO using the federated way using ADFS and this is working fine on the desktop browser, my client has the requirement that if this is done then users should be able to login in to the ...
2
votes
1answer
390 views

Community login without redirecting user to Salesforce with SSO or OAuth

We are building a Drupal site for one of our customers. Our customer wants to use the Salesforce self-registration and community login features for authenticating their customers to the CMS. As far ...
1
vote
1answer
99 views

Salesforce as identity provider - implementing Single Logout (django + pysaml2)

Related question: https://stackoverflow.com/questions/47293940/sp-initiated-single-logout-not-working-with-salesforce I'm implementing single-sign-on service using Salesforce as identity provider. My ...
0
votes
1answer
36 views

Salesforce as identity provider - SAML authentication request fails

I'm trying to do a login using Salesforce as IDP. I have the certificate uploaded in setup->apps->connected apps->manage connected apps I have also checked "Verify request signature". The strange ...
0
votes
1answer
2k views

OpenID Connect login returns No Oauth Token & Empty Response

Trying to create an OpenID Connect provider in my app to provide SSO into SF. I'm using a python library: pyoidc. However, I keep getting redirected to an error URL... https://na10.salesforce.com/...
1
vote
1answer
541 views

Setup SSO Salesforce Commerce Cloud

I just wanted to know if it is possible to setup SSO for Salesforce Commerce Cloud (Demandware) using Okta? Is it some thing OOB feature of Salesforce Commerce Cloud (Demandware) or need to do some ...
0
votes
1answer
432 views

How to get Access token when SSO enabled for Salesforce(LDAP)

We have Integrated with LDAP(Ms Active Directory) for SSO in our Salesforce org and It is working fine in web browser means when we login using ldap credentials, it is redirecting to salesforce ...
4
votes
1answer
383 views

Specific differences between Federated Authentication with SAML compared to OpenID Connect Auth Provider for SSO to SFDC

I've successfully tested SSO against Azure AD / O365 using the approach illustrated on this developer.force.com post, which uses an Auth Provider and the OpenID Connect Provider Type. However I see ...
2
votes
1answer
568 views

SP-initiated and IdP-initiated SSO lands on different landing page

I have SAML based SSO authenitcation set in Salesforce. SSP Initiated and IDP initiated SSO lands on different landing pages. I am aware that relay state parameter would decide the landng page for ...
8
votes
1answer
16k views

How do I configure AD FS 3.0 to support Salesforce SSO, especially with Salesforce1?

We are trying to configure AD FS to properly support SSO, particularly with Salesforce1, so our users only need to remember one login. There doesn't seem to be any documentation on how to correctly ...
1
vote
1answer
123 views

Single Sign-On Error page

If the error happens during SSO to Salesforce Community, then a standard error page is shown, with an uninformative message - Single Sign-On Error. We can't log you in.... Error code and description ...
0
votes
0answers
22 views

Chrome plug-ins for Salesforce Org stopped working after implementing SSO on the Org

I work on client Salesforce Org. I have some useful plug-ins installed on Chrome like Salesforce advanced Code searcher. Some days ago client have implemented SSO on the Org, now most of those plug-...
0
votes
0answers
12 views

Social Sign On for Salesforce Mobile App using Connected App

We have a Connected app that generates a token to authenticate. My requirement is to use the connected app for Social Sign on on Salesforce mobile app. Any ideas on implementation of this? Is Social ...
0
votes
1answer
444 views

Sandbox Login not working

We can't login to our eloqua sandbox. I get this error... We can't log you in because you're only allowed to use single sign-on. For help, contact your Salesforce administrator. SSO setting not ...
0
votes
1answer
53 views

SSO authentication at API level

I am trying to automate a mobile application in my organization which uses SAML based SSO authentication to allow any user to login to the app. What I am trying to achieve is to perform an action in ...
2
votes
1answer
442 views

Using refreshToken in Marketing Cloud SSO Session

We've created an app for HubExchange which is now listed. When a user opens the app, we receive the encoded JWT payload through the application login endpoint as documented here. We decode this ...
1
vote
1answer
64 views

How to get the public key in form of JWS Key set

I have a JWT Class which generates JWT Token using Private key. Now, I need to expose an endpoint for exernal application to get the public key in the form of JWKS KeySet. Can anyone guide me how to ...
0
votes
1answer
42 views

Login Discovery page— Need to provide userId twice for login

i have implemented login discovery page which will ask to enter ferdation id and once fedrationid enters it will redirect to perticular flow. Question here is when i am entering the fedrationId and ...