We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

177 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
0answers
99 views

SSO with Environment Hub: do hub-users still need to know the member-org-user's password to use API tools like eclipse, ANT or dataloader?

I've configure SSO with Environment Hub for a DE linked to our Hub. It works: hub-org-users can login without knowing the password on the mapped member-org-users. So far, so good. Now do I need to ...
5
votes
1answer
1k views

Salesforce as IdP with ADFS 2.0

I’m trying to use the free developer edition (http://developer.force.com/) of and setup a demo SAML Idp for testing with my ADFS 2.0 + SP. So far I’ve managed to enabled SAML support, and created a ...
4
votes
1answer
425 views

Why would I use the “Existing User Linking URL” in an Authentication Provider

The authentication provider documentation provides a fairly good description for what the 'Existing User Linking URL' does, but I do not understand the context for where and when this URL would be ...
4
votes
1answer
383 views

Specific differences between Federated Authentication with SAML compared to OpenID Connect Auth Provider for SSO to SFDC

I've successfully tested SSO against Azure AD / O365 using the approach illustrated on this developer.force.com post, which uses an Auth Provider and the OpenID Connect Provider Type. However I see ...
4
votes
0answers
209 views

Managing certificates programmatically in Salesforce Org (after sandbox creation/refresh)

I was trying to find some information on feasibility of creating and deleting self-signed certificates in Salesforce Org programmatically, which could be incorporated into post sandbox creation/...
4
votes
0answers
745 views

When using SSO what can take over the session timeout in Salesforce setup?

Sessions expire automatically after a predetermined length of inactivity, which can be configured in Salesforce from Setup by clicking Security Controls. The default is 120 minutes (two hours). If you ...
4
votes
0answers
513 views

How to enable SSO on mobile using Salesforce1

I need to launch another mobile app on the same mobile device from Salesforce1. I have implemented that functionality.It is currently just launching the other app by invoking the app specific URI. Now ...
4
votes
0answers
159 views

Delegated SSO redirection to custom client page after logout

We have implemented a delegated SSO with sfdc using Java webservices (Connected to LDAP directory).After the logout from sfdc the client wants the redirection to happen to their server pages rather ...
4
votes
1answer
620 views

Touch.salesforce.com + SSO + Mobile App setup for SSO

I have done SSO using the federated way using ADFS and this is working fine on the desktop browser, my client has the requirement that if this is done then users should be able to login in to the ...
4
votes
1answer
608 views

Authentication approach with Salesforce in Mobile App

Here is my case study: We are developing a mobile app. The mobile app interacts with two salesforce orgs i.e. Metadata org : Having all the customer metadata required by mobile app for each customer....
3
votes
2answers
78 views

Custom authentication provider - retrieving a parameter from url in initiate() method

We have a working external identity provider SSO Oauth 2.0 with custom apex provider. (External app redirects to a specific SF community) We need to extend it to accept a custom parameter from the ...
3
votes
0answers
160 views

Single Sign On (SSO) with Active Directory Federation Services (ADFS) as Identity Provider

There are other general questions regarding SSO here and here, but I'm specifically running into this error when using ADFS as the IdP: Incoming SAML message is not properly formatted, or has ...
3
votes
0answers
344 views

What would be the URL for SSO into Trailhead using org login?

I have a salesforce org with SSO set up that triggers (on our network) if you navigate to https://exampleDomain.my.salesforce.com/ (not the real custom domain). The login users use for that org is ...
3
votes
0answers
407 views

User to be redirected to another URL after successful SSO authentication

I want the users to be redirected to another URL (visualforce tab) after successful SSO authentication. We have setup SP initiated SSO. Our Identity provider uses SAML 2.0 and as per a salesforce ...
3
votes
1answer
200 views

is it possible to embed a thirparty SSO page in lightning?

is it possible whenever the user clicks on the particular link a new lightning tab needs to be opened with the embeded SSOed thirdparty page.
3
votes
0answers
149 views

Using Salesforce as identity provider for my web app and Community portal

I have a Salesforce Communities site w/ user base set up, and I also have a custom web app (a CMS). I'm trying to allow my customers to log into my web app using their Salesforce username/password, ...
3
votes
0answers
263 views

SSO with multiple domains. How to create Community Sessions for one portal user in salesforce?

There is multiple domains for the communities in the org. User have to be able to have an opportunity to log in into all communities via one. Example : Communities A,B. From external site_X User_1 ...
3
votes
0answers
56 views

When using Salesforce as an Identity Provider, does it authenticate against it's user base?

If I have purchased Salesforce for 10 users, does that means that I can only perform authentication against those 10 users only ? To put it another way, if I have a website that has 1,000 registered ...
3
votes
0answers
347 views

Can you have a salesforce community with multiple Single Sign on Configurations?

Our organization is has multiple clients that we support. We would like to have one community that they all log into for technical support. We have our company's single sign on set up successfully ...
3
votes
0answers
83 views

Can we add SSO in managed package?

I have an app which is using SSO to integrate with salesforce. Salesforce is used as an identity provider. So my question is can I add SSO in managed packaged? Because we want to provide an managed ...
3
votes
0answers
608 views

OpenID Connect's Implicit Flow is available in Salesforce?

I'm trying to login to Salesforce by Implicit Flow using third-party OpenID Provider on localhost. After authentication and authorization on the OP, it responds Access Token and ID Token to ...
3
votes
0answers
904 views

Auth Provider : AuthorizationError?ErrorCode=NO_ACCESS&ErrorDescription=User+was+a+portal+user

I would like to ask you about Auth Provider: I have a Registration Handler in a DE org linked to my Auth provider, it is working correctly and allowing the external users to register. Now I decided ...
3
votes
0answers
282 views

Implementing Custom External Identity Button on Visualforce page

I'm currently trying to implement a button on my organizations customized visualforce page which I want to have the exact same functionality as the button in this screenshot (the googleLogin button, ...
3
votes
0answers
200 views

Not able to see the Service Provider listed under Identity Provider for Single Sign On

Hi All I am facing an Issue while configuring SSO. I have set identity provider and in one org and created Service provider in aother org. However after creating the service provider configuration ...
3
votes
0answers
142 views

Facebook SSO with Portal Users

I am using Facebook as Auth Provider to allow portal users to login into portal org via their facebook credentials. I have successfully implemented that. Now, in Registration Handler, while creating ...
3
votes
0answers
308 views

Configuring and Installing Open SSO

I am trying SSO integration between sales force and open sso but i got struck in configuring Open SSO I followed this link for config. I have installed glass fish and I have started domain but I don'...
3
votes
0answers
898 views

Salesforce SSO using Elastic SSO fails

I have set up the SSO Identity Provider using Elastic SSO and then configured Salesforce as a Service Provider. I also configured the Salesforce Single Sign On Settings. I then try to login and it ...
2
votes
0answers
81 views

Authenticate Connected App (Mobile) with Single Sign on

I have a mobile app that uses OAuth to login users. That part works really well, but recently I was asked to make it work for SSO (Single Sing-On). The app as it is has a weird behavior. To be able to ...
2
votes
0answers
101 views

OpenID Single Sign On - Change Authentication Flow

I have an Auth Provider created with OpenID and everything is working good. But, I would like to change the Authentication Flow from web server to user-agent Source: https://help.salesforce.com/...
2
votes
0answers
25 views

Can Social Logon be used directly from a native mobile app?

We have a Customer Community with Facebook and Google set up as Auth Providers. In addition, we have a mobile app that connects to Salesforce using OAuth towards this community. This all works fine. ...
2
votes
1answer
195 views

Issues with start url when setting up salesforce as IdP for Office365

I have been trying to setup Salesforce as Identity Provider for Office 365 apps as per the article using SAML. I have setup start url as https://login.microsoftonline.com/login.srf?msg=AuthnReq&...
2
votes
0answers
41 views

Facebook and Salesforce SSO

We are implementing Salesforce and Facebook SSO integration for communities. Do anyone know how to handle the registration process when the Facebook user signed up for facebook by using the mobile ...
2
votes
0answers
99 views

Redirection to lightning app using apex or configuration change — lightning only

We have 2 different lightning app. we are sso enabled organization now planning to sso from another place. Is there any way to redirect the user to the different lightning app after sso validation ...
2
votes
1answer
266 views

Service accounts with Salesforce and Okta SAML for everything else

How are people using Okta or other SSO providers to manage both service accounts and user accounts? For user accounts I'm clear on configuring SAML. For Service Accounts, how are you then disabling ...
2
votes
0answers
277 views

Single Sign on with Communities and Azure AD

We are in the process of setting up Single Sign on for customer communities but we have an issue in getting it to work. We already set up Single Sign on with Azure AD for our internal Salesforce users ...
2
votes
0answers
92 views

How to create a force.com project in a SSO sandbox

Recently, we enabled Single Sign On in one of our sandbox. When I try to refresh metadata using Eclipse, I am getting following error. I have tried by specifying different environment which matches ...
2
votes
1answer
390 views

Community login without redirecting user to Salesforce with SSO or OAuth

We are building a Drupal site for one of our customers. Our customer wants to use the Salesforce self-registration and community login features for authenticating their customers to the CMS. As far ...
2
votes
0answers
44 views

Does using Environment Hub negate need for SSO in sandbox

I'm testing SSO w openId connect (Azure AD as auth provider) I'm trying to better understand how I should set it up so that I can use SSO to authenticate to sandboxes that are spun up from prod. I'm ...
2
votes
0answers
317 views

Is there is any way to get the Auth.userdata data return by facebook ( single sign-on) in salesforce?

Auth data received in debug is null DEBUG|DATA:::::UserData:[attributeMap={id=1124567878765, name=test , sfdc_networkid=98394580535tF}, email=null, firstName=null, fullName=test ABC, ...
2
votes
0answers
93 views

SAML SSO SFDS as IdP

Our requirement is to call an external web API with Salesforce generated SAML assertion then the API will return an authentication token for invoking subsequent other web services to retrieve data and ...
2
votes
0answers
26 views

Salesforce SSO with Microsoft AD : can some Salesforce users be under SSO control, and others not?

We have some users worldwide who are connected to one Microsoft AD server, others who are not connected. In Salesforce, can we have the first family of users use SSO under control of SSO, and the ...
2
votes
0answers
230 views

How to know whether SSO is enabled for current user?

I am trying to reset password for users. My requirement is : When I create user through code(where input is grabbed through custom UI form), a mail should be triggered, to user which contains a link ...
2
votes
0answers
102 views

How to force log out of Service Provider orgs when logging out of Identity Provider org?

Scenario: Hub and spoke org strategy with one Salesforce org acting as a SAML IdP for the other N orgs. Is there a way to force a log out on the SPs when a user manually logs out of the IdP org? I ...
2
votes
1answer
568 views

SP-initiated and IdP-initiated SSO lands on different landing page

I have SAML based SSO authenitcation set in Salesforce. SSP Initiated and IDP initiated SSO lands on different landing pages. I am aware that relay state parameter would decide the landng page for ...
2
votes
1answer
105 views

Single Sign-On - How to Force User First be Connected to Corporate Network?

In this Frequently Asked Questions article, there is a question Does single sign-on work outside my corporate firewall?" The answer is : Yes, single sign-on can work outside your corporate ...
2
votes
0answers
432 views

How to write test class for auto-generated JIT Class SSO

private void handleUser(boolean create, User u, Map<String, String> attributes,String federationIdentifier, boolean isStandard) I am just creating a user in SSO JIT using this handleuser method....
2
votes
1answer
442 views

Using refreshToken in Marketing Cloud SSO Session

We've created an app for HubExchange which is now listed. When a user opens the app, we receive the encoded JWT payload through the application login endpoint as documented here. We decode this ...
2
votes
0answers
1k views

Salesforce SSO and SimpleSAMLphp - Assertion OK, Login failed

I am trying to setup SSO between a LAMP website and SalesForce by using SimpleSAMLphp v.1.13.2. I have followed this tutorial: https://salesforce-developer.net/salesforce-sso-with-simplesamlphp SAML ...
2
votes
0answers
25 views

How do I update Mass Edit/Update app to reference a different domain?

We recently implemented a vanity URL (MyDomain) and SAML SSO (Okta) and now the Mass Edit and Mass Update apps don't work. When logged in to Salesforce, if I try to launch either from an Account or ...
2
votes
0answers
273 views

Salesforce as IdP for Aha.io - Single Sign-On Error: Invalid HTTP Method

I'm completely new to SSO, so please bare with me... I am trying to setup Salesforce as the IDP using SAML 2.0 for a third party application called Aha.io. I've followed this guide to Enable ...