We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
0
votes
0answers
12 views

AuthConfiguration getSamlSsoUrl method return link doesn't work

So I have the method getSamlSsoUrl(communityUrl, startURL, samlId) from the class AuthConfiguration and returned a very long url with saml id, saml acs, saml binding type, and etc in the url. However,...
0
votes
0answers
24 views

SSO via Azure as an auth provider - avoiding errors in registration handler

I am trying to SSO into Salesforce via auth provider (Azure). It works when I log in for the first time, but afterwards [Third-Party Account Link] record will be created and the following error will ...
0
votes
0answers
35 views

SSO via SAML - avoid a step of clicking on a button corresponding to identity provider on the login screen

There are certain users in the org that have only SSO, as in they don't have a salesforce password set up. Is there a way to send these users a link they can bookmark that directly goes to the step ...
1
vote
1answer
31 views

Do SSO users need to have a password already?

This is basically for confirmation, but I might be wrong. If I'm trying to get certain users to use SSO only, I don't need to have them set up a Salesforce password correct? I'm under the impression ...
0
votes
1answer
39 views

Salesforce SSO with multiple identity providers

Is it possible to configure multiple ADFS and Azure AD on a single Salesforce org for enabling SSO with multiple identity providers
5
votes
1answer
108 views

Authorize Apex Rest API call using an Azure token

I'm new to the OAuth concept in Salesforce and looking for some pointers for my use-case. I'm not even sure if I'm framing my question correctly, but I'm trying to understand if I can invoke an Apex ...
0
votes
0answers
34 views

SSO to third app from Salesforce using Azure AD

We've implemented a SSO to Salesforce using Azure AD. This SSO works. From internal Salesforce we want to do a SSO to a Document Management System. We've implemented the SSO using Azure AD to this ...
0
votes
0answers
27 views

How to access the REST API with the user with Permission 'Is Single Sign-On Enabled' is enabled

I have created one RestResourc to give the ability to the external system to attach the Report to Asset in Salesforce. Now the problem I am facing is the user which I am using for Authentication ...
0
votes
0answers
39 views

Registration Handler - determining which Auth Provider was used to sign in

We have many Auth Providers (all based on OpenID Connect) we are using to SSO into a Salesforce community. In order to add some logic to the Registration Handler that checks if a user already exists ...
0
votes
0answers
26 views

Login (Screen) flow for Custom Community Login Page

I have a salesforce community custom login page, using SSO and SAML enabled for federated single sign on. My implementation is similar to the approach mentioned here - https://help.salesforce.com/...
0
votes
1answer
33 views

SSO with Active Directory Federation Services (ADFS) 4.x

I'm trying to set up Single Sign-On for my customer between their on-premises AD and Salesforce (Sales Cloud). They are using ADFS 4.x. We followed SF instructions that were written for ADFS 3.x but ...
1
vote
1answer
37 views

SSO with Salesforce and Azure AD - disable single logout

I've started playing with Salesforce and configuring SSO to work with our sandboxes. So far so good, and logins can happen without issue. However, I'm running into a bit of an issue when a user logs ...
0
votes
1answer
31 views

Can we avoid navigating to Azure Ad login screen when we configure SSO with Azure AD as ID provider

I have to configure Single Sign using Azure AD for our salesforce community as Identity provider and Salesforce being the service provider, I want to use Open id Connect. I want check with the forum ...
1
vote
1answer
81 views

Single Sign-On for Marketing Cloud

Using Single Sign-On for Marketing Cloud, how are the Marketing Cloud roles managed? From Marketing Cloud as a standard user or from Sales Cloud? I've never implemented it and after reading the ...
0
votes
0answers
39 views

Get acces token in salesforce

I have an hybrid app (1 part using Salesforce and another one using Java Spring boot). I'm making login on Salesforce by SSO but after login, I need to get the access token for the user and use it to ...
1
vote
1answer
28 views

Why doesn't https://mydomain.my.salesforce.com/?login work when single signon is enabled?

The Best Practices and Tips for Implementing Single Sign-On states: System admins must always be able to log in to Salesforce, even if SSO is enabled for their accounts. For example, you need a ...
0
votes
1answer
36 views

Salesforce as identity provider - SAML authentication request fails

I'm trying to do a login using Salesforce as IDP. I have the certificate uploaded in setup->apps->connected apps->manage connected apps I have also checked "Verify request signature". The strange ...
1
vote
1answer
99 views

Salesforce as identity provider - implementing Single Logout (django + pysaml2)

Related question: https://stackoverflow.com/questions/47293940/sp-initiated-single-logout-not-working-with-salesforce I'm implementing single-sign-on service using Salesforce as identity provider. My ...
0
votes
0answers
22 views

Chrome plug-ins for Salesforce Org stopped working after implementing SSO on the Org

I work on client Salesforce Org. I have some useful plug-ins installed on Chrome like Salesforce advanced Code searcher. Some days ago client have implemented SSO on the Org, now most of those plug-...
4
votes
1answer
249 views

Automate setup of an external identity provider via APIs

I use the Financial Force Metadata API Apex Wrapper to simplify an app setup using a custom UI. Part of the setup is the creation of a Self-Signed Certificate and its usage in a Single Sign-On Setting....
0
votes
0answers
12 views

Social Sign On for Salesforce Mobile App using Connected App

We have a Connected app that generates a token to authenticate. My requirement is to use the connected app for Social Sign on on Salesforce mobile app. Any ideas on implementation of this? Is Social ...
0
votes
1answer
42 views

Login Discovery page— Need to provide userId twice for login

i have implemented login discovery page which will ask to enter ferdation id and once fedrationid enters it will redirect to perticular flow. Question here is when i am entering the fedrationId and ...
1
vote
1answer
64 views

How to get the public key in form of JWS Key set

I have a JWT Class which generates JWT Token using Private key. Now, I need to expose an endpoint for exernal application to get the public key in the form of JWKS KeySet. Can anyone guide me how to ...
0
votes
0answers
29 views

OpenID connection return error

I am trying to create an OpenID Connect provider in my app to provide SSO into SF through ngrok tunnel Below is the url: https://na81.salesforce.com/_nc_external/identity/sso/ui/AuthorizationError?...
0
votes
1answer
53 views

SSO authentication at API level

I am trying to automate a mobile application in my organization which uses SAML based SSO authentication to allow any user to login to the app. What I am trying to achieve is to perform an action in ...
0
votes
1answer
61 views

SSO for Salesforce Sites

I have a force.com site which is used by external users. I want to have SSO authentication from an external IDP, SAML. I prefer it to be when a param is transferred on the URL site - check it on the ...
3
votes
2answers
79 views

Custom authentication provider - retrieving a parameter from url in initiate() method

We have a working external identity provider SSO Oauth 2.0 with custom apex provider. (External app redirects to a specific SF community) We need to extend it to accept a custom parameter from the ...
3
votes
2answers
103 views

Let external system modify Salesforce data on behalf of logged in user

I am going to build a native Salesforce app (Managed package) that will be installed in many subscriber orgs. The app will make callouts (eg. calling REST endpoint) to external Java app. The Java ...
2
votes
1answer
29 views

Is there a need to renew the Self Signed Cert for Single Sign On if Salesforce is not the Identity Provider?

Based on this help article and this community post, can we allow the Self Signed Cert within Salesforce to expire if we do not use Salesforce for an Identity Provider? Is there any harm in doing this? ...
0
votes
0answers
49 views

SAML authentication flow, do not require user to click “Log in with <sso idp option>”

I am setting up a client with a SAML IdP and SP for their site, and one of their partners now needs to tie into this system. They use force.com to do so. We have SSO working as described in this doc: ...
1
vote
1answer
112 views

Need help on Salesforce Login Discovery using My domain

requirement- When user enter username then it will redirect to SSO setup in salesforce and if user entered correct details then second sso needs to get called and if user enter correct credentials ...
0
votes
0answers
31 views

Need help on Salesforce Login discovery

Requirement-I want one of the dedicated profile to be redirected to seprate SSO flow and others needs to redirect to normal username/password flow. I have gone through Login discovery but it seems to ...
1
vote
1answer
38 views

Can we remove the ability to login using a username for community members, and only include the ability to login using KP Single Sign-on?

Can we remove the ability to login using a username for community members, and only include the ability to login using KP Single Sign-on?
1
vote
1answer
69 views

Just-in-Time Provisioning for Communities Mixed DML Error

We are trying to implement Just-in-Time Provisioning for Communities using custom handler class. There are 3 scenarios When Contact with the provided email (Federation ID) exist in salesforce and ...
0
votes
1answer
285 views

How to bypass login page in URL redirects after SSO setup

After SSO is set up, when I tried to redirect the user to the second Salesforce org, it takes the user to login page. Do I have to do any more authentication before redirection? my controller is below....
1
vote
1answer
204 views

Deployment to Scratch Org failing

I've one single sign on setting which need to be deployed every time upon scratch org creation. SSO has a JITHandler with it which is part of source and deployed to scratch org. I know that SSO ...
1
vote
1answer
91 views

Can we use frontdoor.jsp to give access to salesforce vf page, without using username and password?

If the SSO is set up, can we use frontdoor.jsp without using Username password? I would like to access the second salesforce org from first salesforce org. SSO has been set up already. Canvas ...
4
votes
1answer
281 views

SAML Assertion Validator crashing on encrypted assertion

I'm adding support for encrypted assertions to my SAML 2 IDP, and I'm trying to validate them against a number of SPs we work with. Everything looks good at https://www.samltool.com/online_tools.php (...
3
votes
0answers
160 views

Single Sign On (SSO) with Active Directory Federation Services (ADFS) as Identity Provider

There are other general questions regarding SSO here and here, but I'm specifically running into this error when using ADFS as the IdP: Incoming SAML message is not properly formatted, or has ...
1
vote
1answer
255 views

Marketing Cloud Download Metadata for Single Sign-On (SSO)

In the Single Sign-On documentation, it states there is a Download Metadata link available to retrieve metadata needed to setup SSO. I don't see this anywhere in the Security Settings in Admin. ...
0
votes
2answers
40 views

Salesforce as identity provider for third party applications -How to extend it for communities

I have enabled Single sign on between salesforce and a thirdparty app using SAML. I have created a connected app where I have configured the SAML Service Provider Settings. We am accessing the ...
0
votes
0answers
27 views

Navigate from one sso saml protected SP org to another saml protected SP org without logging into the 2nd SP?

I have 2 service providers, SP1 and SP2 both connected to an IDP through SSO and I have obtained my SAML response from IDP into SP1. Now, I want the user from SP1 to go to SP2 upon clicking a link/...
1
vote
1answer
53 views

How to get data from one Service Provider to another Service Provider using the obtained SAML assertion?

I have 3 Salesforce orgs (IDP, SP1 and SP2) and have set up SSO where IDP is my Identity-Provider and SP1 and SP2 are 2 Service-Providers. Using SP1-initiated SSO login, the user gets authenticated in ...
0
votes
0answers
32 views

CustomLandingController seems to be not working when SSO is used for community login

I've a requirement to setup customer community(SSO based Authentication/ No Username-Password login allowed) with few Pages to be displayed if User is coming to community for the first time. Here, ...
0
votes
0answers
42 views

Debug Single Sign-On

I haven't worked with single sign-on very much and currently I am trying to get single sign-on setup with Azure AD as the identify provider. I've walked thru the steps and I have a successful ...
1
vote
0answers
103 views

Error: Invalid HTTP method in community SSO

Have set up my community SSO by referring Configure SSO Across Multiple Salesforce Orgs. After that when I try to login I am getting below error. Error: Invalid HTTP method I tried to have set up ...
1
vote
1answer
165 views

Disable forgot password for SSO Users

We have enabled SSO for our users. How can I prevent users from using salesforce login(login.salesforce.com) if they know saleforce password from before setting up sso or if they reset their password ...
0
votes
0answers
61 views

Implementing Single Logout (SLO) with OneLogin is Donwloading a file when arriving to /secur/logout.jsp

Situation: Implementation of Single Logout in Salesforce IdP: OneLogin ServiceProvider: Salesforce Protocol: SAML In our test environment, when we try to logout from a community we are redirected to '...
0
votes
3answers
169 views

Multi-Org Android Configuration Microsoft MDM Intune

I am trying to configure Intune MDM (Mobile Data Management) to push multiple instances of Salesforce in the app config. Intune provide a JSON configuration for Android for Works and a XML ...
1
vote
1answer
79 views

Consume external REST API user-aware (without having to re-login)

I have an Apex class that is consuming a partners REST webservices. Currently all users of my app (in the installed org) access the service via a single API Integration user. We now want make the ...