Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
0
votes
0answers
24 views

Salesforce Marketing Cloud Single Sign On Error - SAML SSO Error

We are trying to configure Single Sign On with our Salesforce Marketing Cloud Instance. SFMC is our SP while Microsoft Azure is our IdP. We have been following this link to setup the Single Sign On ...
0
votes
0answers
14 views

How to set up salesforce community SSO with GO (Drupal) as Identity Provider using HMAC? [closed]

We have a site hosted on the Drupal Go platform, and now we want to implement the same in the salesforce community for our existing users. Every user has an associated GO id with it. We want to set up ...
1
vote
1answer
29 views

How Do I Enable SAML IdP in a Customer Community?

Our Client need to setup an SSO for their customers from the Salesforce Customer Community portal into another web application using SAML. We are familiar with enabling Salesforce as an IdP for ...
0
votes
1answer
36 views

SSO and User Provisioning From External WebApp into Salesforce Community

Scenario - customer is logged into our web app, they click on create a ticket and are redirected to the salesforce community page as a user in salesforce with the same email as the web app, want to ...
0
votes
0answers
20 views

Redirect from sub-sub-domain to MyDomain

Hello I have set up the following redirect Custom sub-sub-domain URL -> My Domain And this didn't work. It did not redirect to our My Domain page, but instead it redirected to a cs32.salesforce.com ...
3
votes
1answer
63 views

Redirecting to MyDomain URL

We set up SSO with Auth.Provider in Salesforce. We deployed My Domain and linked the auth provider to it. When a user navigates to the My Domain URL, they are automatically redirected to the auth ...
2
votes
1answer
36 views

Disabling Direct Login

For the past couple months our team has been working to enforce SSO only authentication via OKTA. We've played around with a couple ideas ranging from delegated authentication, federated ...
0
votes
2answers
34 views

Keep User Logged In When Using SSO in Communities

We have a Salesforce Customer Community site built with Aura components with many customizations. The landing page is public so doesn't require any authentication. However, if it detects user is not ...
1
vote
1answer
31 views

Single Sign On - Mobile App

We have configured SSO through Azure. Conditional access policy token for this application is configured for 24 hours. Application timeout is set for 2 hours. The Mobile App stays connected as ...
0
votes
1answer
51 views

oauth infinite redirect loop during authorization

This problem has occurred in a few of our applications that use the same forms of salesforce oauth authentication. When you first navigate to mywebsite.com, it sends you to salesforce to login, once ...
2
votes
1answer
40 views

SAML - Triggering Single Logout (SLO) when session times out at the identity provider

Let's say I have Saleforce set up as an Identity Provider with a session timeout of 15 minutes. I set up a connected app with SAML and SLO. I use SSO to access a connected app and start working only ...
0
votes
0answers
29 views

Salesforce community login from different website without SSO [duplicate]

I would like community users to login to salesforce community from the company website (via click) without SSO. is there a way to achieve this? For salesforce login (not community) I know there is a ...
1
vote
1answer
47 views

SSO SAML + Embedded Login

I'm not finding useful documentation for this scenario Salesforce is set as IDP (identity provider) There are some SP (Service providers, web app) Is implemented a SSO using SAML Is asked to ...
0
votes
0answers
10 views

Is it possible to login in Salesforce Mobile App via a site page (to submit credential) which is calling OKTA for authentication?

Is it possible to login in Salesforce Mobile App via a publicly available site page (to submit credential), which is calling OKTA for authentication in behind via soap call and redirect to Salesforce ...
0
votes
0answers
32 views

How to pass custom/dynamic request parameter to salesforce single sign on initialization url?

I am working on implementing single sign on using Salesforce Auth. Providers. I am integrating it with IdentityServer 4 using Open ID connect method. I have need to pass additional "launch" request ...
3
votes
0answers
59 views

Salesforce Marketing Cloud Single Sign On - Azure

We are currently attempting to carry out the set-up of the Single Sign On functionality for Salesforce Marketing Cloud, however when trying the two different ways of setting it up we are receiving the ...
0
votes
0answers
19 views

Manage multiple profiles for community users

I am trying to enable Social Sign-On for a community. I am currently using Facebook & able to register/ login with that. In the community, we need to provide different types of users like students,...
0
votes
0answers
18 views

Single SSO for Community and Salesforce Application

I already have a SSO enabled for my Salesforce Application and We have created new Community and need to enable the SSO for the community. Can i update and use the same Configuration for SSO for both ...
5
votes
0answers
167 views

SSO between Salesforce - Mobile app - web service provider

I'm trying to understand if it's possible to maintain a SSO session between 3 different elements: Mobile APP (Android/IOS) - developed with Salesforce SDK Salesforce (Identity provider) Web service ...
1
vote
1answer
47 views

How to pass relaystate parameter from salesforce community to Azure

I am enabling SAML2.0 Authentication for Salesforce community users. During Authentication I want to pass Relay state parameter dynamically to Azure(IDP) so that users can navigate to a different ...
0
votes
1answer
90 views

What is “Request Signing Certificate” used for?

Does anyone know what this certificate is used for? We use Okta as IDP and the SSO work well even though I didn't upload this certificate into Okta.
0
votes
0answers
21 views

Custom Auth Provider 503 Error

I have implemented a custom auth provider as part of the single sign on flow for Salesforce communities. Most of the flow is working correctly. I am able to get the authorization token, access token ...
1
vote
1answer
23 views

SSO using multiple FederationID values

My client has asked to configure SSO using FederationID. When client login to the other application, they use either EmpID, userName, emailaddress for authenticating. My issue is when client tries to ...
2
votes
1answer
20 views

Does SSO using Federated Authentication respect org-wide password policies?

We have Federated Authentication implemented for our SSO and therefore a separate set of password policies are being applied from the client app. I found this SF article but it is only referring to ...
0
votes
0answers
24 views

“Embedded Login” Login Button is not displaying in Chrome Proper only

I attempted a Salesforce Embedded Login test by deploying the Heroku "embedded-login-example" github project (https://github.com/salesforceidentity/embedded-login-example/blob/...
1
vote
0answers
35 views

Salesforce SAML Assertion flow via REST API for Lightning Out

Context: We want to log a user into a Lightning Out App hosted on an Azure AD System using the SAML Assertion flow. What we have establisched so far: We have a functioning connection for our ...
1
vote
0answers
51 views

Authenticate Community Users in External Rest API

I have a Community that consumes an external Rest API that requires authentication. For testing purpose, I hardcoded a username and a password in my apex rest callouts in order to be able to consume ...
0
votes
0answers
20 views

Extract specific Information from SAML error response when try to login Salesforce from an IDP

Do we have a way to extract the Username or email for a user when trying to login to Salesforce from an Identity Provider(Not Salesforce as the Identity Provider)? I have a use-case to show a custom ...
1
vote
0answers
37 views

Salesforce community SAML SSO not working for users created through manually

SAML SSO to community is failing for users with error. I am using the Standard provisioning(not the custom JIT handler) ErrorCode=5&ErrorDescription=Unable+to+create+user&ErrorDetails=...
1
vote
1answer
24 views

Generic SSO/ADFS question

My customer( a charity org) wants to implement SSO. They are using LDAP with Active Directory(AD) for authentication for other applications. They want Salesforce SSO integrated with LDAP. However, ...
0
votes
0answers
23 views

Need To route to different SSO based on user checkbox

i have two sso setup in my org. 1.OneWay 2.TwoWay My requirement on each user there is a check box. If that checkbox is true then i need to route that user to OneWay sso login flow.If not then i ...
1
vote
1answer
44 views

Marketing Cloud Tab in SFDC

Would it be possible to have a MC tab in SFDC? Or at least a tab when clicked would open marketing cloud tab in another window? (The user should also be logged in automatically as we are thinking ...
0
votes
0answers
23 views

AuthConfiguration getSamlSsoUrl method return link doesn't work

So I have the method getSamlSsoUrl(communityUrl, startURL, samlId) from the class AuthConfiguration and returned a very long url with saml id, saml acs, saml binding type, and etc in the url. However,...
0
votes
0answers
43 views

SSO via Azure as an auth provider - avoiding errors in registration handler

I am trying to SSO into Salesforce via auth provider (Azure). It works when I log in for the first time, but afterwards [Third-Party Account Link] record will be created and the following error will ...
0
votes
0answers
46 views

SSO via SAML - avoid a step of clicking on a button corresponding to identity provider on the login screen

There are certain users in the org that have only SSO, as in they don't have a salesforce password set up. Is there a way to send these users a link they can bookmark that directly goes to the step ...
1
vote
1answer
33 views

Do SSO users need to have a password already?

This is basically for confirmation, but I might be wrong. If I'm trying to get certain users to use SSO only, I don't need to have them set up a Salesforce password correct? I'm under the impression ...
0
votes
1answer
184 views

Salesforce SSO with multiple identity providers

Is it possible to configure multiple ADFS and Azure AD on a single Salesforce org for enabling SSO with multiple identity providers
5
votes
1answer
294 views

Authorize Apex Rest API call using an Azure token

I'm new to the OAuth concept in Salesforce and looking for some pointers for my use-case. I'm not even sure if I'm framing my question correctly, but I'm trying to understand if I can invoke an Apex ...
0
votes
0answers
35 views

SSO to third app from Salesforce using Azure AD

We've implemented a SSO to Salesforce using Azure AD. This SSO works. From internal Salesforce we want to do a SSO to a Document Management System. We've implemented the SSO using Azure AD to this ...
0
votes
0answers
30 views

How to access the REST API with the user with Permission 'Is Single Sign-On Enabled' is enabled

I have created one RestResourc to give the ability to the external system to attach the Report to Asset in Salesforce. Now the problem I am facing is the user which I am using for Authentication ...
0
votes
0answers
60 views

Registration Handler - determining which Auth Provider was used to sign in

We have many Auth Providers (all based on OpenID Connect) we are using to SSO into a Salesforce community. In order to add some logic to the Registration Handler that checks if a user already exists ...
0
votes
0answers
33 views

Login (Screen) flow for Custom Community Login Page

I have a salesforce community custom login page, using SSO and SAML enabled for federated single sign on. My implementation is similar to the approach mentioned here - https://help.salesforce.com/...
0
votes
1answer
68 views

SSO with Active Directory Federation Services (ADFS) 4.x

I'm trying to set up Single Sign-On for my customer between their on-premises AD and Salesforce (Sales Cloud). They are using ADFS 4.x. We followed SF instructions that were written for ADFS 3.x but ...
1
vote
1answer
86 views

SSO with Salesforce and Azure AD - disable single logout

I've started playing with Salesforce and configuring SSO to work with our sandboxes. So far so good, and logins can happen without issue. However, I'm running into a bit of an issue when a user logs ...
0
votes
1answer
37 views

Can we avoid navigating to Azure Ad login screen when we configure SSO with Azure AD as ID provider

I have to configure Single Sign using Azure AD for our salesforce community as Identity provider and Salesforce being the service provider, I want to use Open id Connect. I want check with the forum ...
1
vote
1answer
125 views

Single Sign-On for Marketing Cloud

Using Single Sign-On for Marketing Cloud, how are the Marketing Cloud roles managed? From Marketing Cloud as a standard user or from Sales Cloud? I've never implemented it and after reading the ...
0
votes
0answers
39 views

Get acces token in salesforce

I have an hybrid app (1 part using Salesforce and another one using Java Spring boot). I'm making login on Salesforce by SSO but after login, I need to get the access token for the user and use it to ...
1
vote
1answer
65 views

Why doesn't https://mydomain.my.salesforce.com/?login work when single signon is enabled?

The Best Practices and Tips for Implementing Single Sign-On states: System admins must always be able to log in to Salesforce, even if SSO is enabled for their accounts. For example, you need a ...
0
votes
1answer
46 views

Salesforce as identity provider - SAML authentication request fails

I'm trying to do a login using Salesforce as IDP. I have the certificate uploaded in setup->apps->connected apps->manage connected apps I have also checked "Verify request signature". The strange ...
1
vote
1answer
148 views

Salesforce as identity provider - implementing Single Logout (django + pysaml2)

Related question: https://stackoverflow.com/questions/47293940/sp-initiated-single-logout-not-working-with-salesforce I'm implementing single-sign-on service using Salesforce as identity provider. My ...

1 2 3 4 5 9