Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
4
votes
1answer
102 views

Authorize Apex Rest API call using an Azure token

I'm new to the OAuth concept in Salesforce and looking for some pointers for my use-case. I'm not even sure if I'm framing my question correctly, but I'm trying to understand if I can invoke an Apex ...
4
votes
2answers
431 views

Google OAuth SSO provider and Restricted Domain

We have setup Google login via OAuth for our Salesforce (Not SAML) and authentication via our custom domain page works fine. But as soon as we try to restrict our users to login only from our domain ...
4
votes
2answers
1k views

Does Salesforce1 support NTLM (e.g. ADFS) authentication?

We have an existing single sign on (SSO) implementation where we redirect users using My Domain to an ADFS server through a mediation layer. In short, the SSO dance looks like this: <redacted>....
4
votes
1answer
246 views

Automate setup of an external identity provider via APIs

I use the Financial Force Metadata API Apex Wrapper to simplify an app setup using a custom UI. Part of the setup is the creation of a Self-Signed Certificate and its usage in a Single Sign-On Setting....
4
votes
1answer
753 views

Delegated Authentication vs Service Provider (SP) Initiated Login

I'm reading about Salesforce SSO, I have some questions/clarification, I find the concept of Delegated Auth, SP Initiated Login to be same since salesforce calls the external IDP or external service ...
4
votes
1answer
2k views

Access REST API after Single Sign-on (SSO)

We have a heroku-hosted web app that used Salesforce as Identity Provider (IdP) to do Single Sign-On (SSO) between SFDC & other services. We know that in doing so our web app user are already ...
4
votes
1answer
859 views

Interesting scenario in Single Sign On

I have a below scenario, Lets say i have implemented SSO for Salesforce and IDp lets say is some .Net based Webservice which implements SAML 2. When user tried to authenticate, He was active in IDp ...
4
votes
1answer
1k views

SSO error in Salesforce1 - Salesforce as IDp

I have set up Salesforce as IDp as well as SP. I am able to login to Service Provider org by navigating to URL of IDp "https://MyDomain.salesforce.com/idp/login?app=0sp40000000T3fU" from Browser. ...
4
votes
1answer
276 views

SAML Assertion Validator crashing on encrypted assertion

I'm adding support for encrypted assertions to my SAML 2 IDP, and I'm trying to validate them against a number of SPs we work with. Everything looks good at https://www.samltool.com/online_tools.php (...
4
votes
1answer
429 views

Cant log user out of Salesforce when using Azure SSO with OpenId Connect

I've successfully tested SSO login against Azure AD / O365 using the approach illustrated on this developer.force.com post, which uses OpenID Connect. However, I've been unable to successfully log ...
4
votes
1answer
408 views

How to process AD security groups with Just-in-time User Provisioning?

I want to auto-assign permission sets based on a user's membership in various security groups in Active Directory ("AD"), during the Just-in-Time user provisioning process. I understand that this ...
4
votes
1answer
2k views

SSO with ADFS 2.0 Missing NameId

I am setting up SSO with ADFS 2.0. Using the same instruction as the following link. http://blog.rhysgoodwin.com/cloud/salesforce-sso-with-adfs-2-0-everything-you-need-to-know/ On the server I have ...
4
votes
2answers
524 views

Open Id Connect Network Activation

I have configured a salesforce instance to use Google for user Authentication via Open Id Connect. This is for users with full Salesforce licenses to login to Salesforce. When I log in from a new ...
4
votes
1answer
307 views

Can salesforce be used as the IdP for customer portal user access to other service providers?

Salesforce can be used as an IdP or SP when using SSO for non-portal users. It can also definitely be used as an SP for portal user SSO. However I cannot find any definitive answer as to whether you ...
4
votes
1answer
424 views

Why would I use the “Existing User Linking URL” in an Authentication Provider

The authentication provider documentation provides a fairly good description for what the 'Existing User Linking URL' does, but I do not understand the context for where and when this URL would be ...
4
votes
1answer
381 views

Specific differences between Federated Authentication with SAML compared to OpenID Connect Auth Provider for SSO to SFDC

I've successfully tested SSO against Azure AD / O365 using the approach illustrated on this developer.force.com post, which uses an Auth Provider and the OpenID Connect Provider Type. However I see ...
4
votes
0answers
207 views

Managing certificates programmatically in Salesforce Org (after sandbox creation/refresh)

I was trying to find some information on feasibility of creating and deleting self-signed certificates in Salesforce Org programmatically, which could be incorporated into post sandbox creation/...
4
votes
0answers
745 views

When using SSO what can take over the session timeout in Salesforce setup?

Sessions expire automatically after a predetermined length of inactivity, which can be configured in Salesforce from Setup by clicking Security Controls. The default is 120 minutes (two hours). If you ...
4
votes
0answers
513 views

How to enable SSO on mobile using Salesforce1

I need to launch another mobile app on the same mobile device from Salesforce1. I have implemented that functionality.It is currently just launching the other app by invoking the app specific URI. Now ...
4
votes
0answers
159 views

Delegated SSO redirection to custom client page after logout

We have implemented a delegated SSO with sfdc using Java webservices (Connected to LDAP directory).After the logout from sfdc the client wants the redirection to happen to their server pages rather ...
4
votes
1answer
620 views

Touch.salesforce.com + SSO + Mobile App setup for SSO

I have done SSO using the federated way using ADFS and this is working fine on the desktop browser, my client has the requirement that if this is done then users should be able to login in to the ...
4
votes
1answer
608 views

Authentication approach with Salesforce in Mobile App

Here is my case study: We are developing a mobile app. The mobile app interacts with two salesforce orgs i.e. Metadata org : Having all the customer metadata required by mobile app for each customer....
3
votes
1answer
488 views

SSO of a force.com site with another force.com site in same org

Org has 2 customer portals/sites e.g. abcd.secure.force.com/xxxx abcd.secure.force.com/yyyy Most users have access to both portals, users have same set of credentials for both of the portals. If ...
3
votes
1answer
1k views

SSO & API Only User Authentication

I have completed Mydomain set up and Single Sign-On set up in one of our Sandboxes and waiting for the IDP to complete their setup. Questions: Meanwhile how do I make sure the users are ...
3
votes
1answer
2k views

Is it possible to add additional custom attributes in Salesforce as Identity Provider SSO scenario?

I've implemented Single Sign On with Salesforce as Identity Provider scenario using SAML. To avoid unnecessary data bandwidth I want to pass additional data during Single Sign On login process. ...
3
votes
1answer
2k views

Difference between Authentication and Identity Provider

Question What is the difference between an authentication provider and an identity provider. Can Salesforce be the authentication and identity provider at the same time?
3
votes
1answer
851 views

Cost associated with Single sign on

Are there any costs associated with using SAML single-sign on with Salesforce? Are there any limits with number of calls on a daily basis?
3
votes
2answers
103 views

Let external system modify Salesforce data on behalf of logged in user

I am going to build a native Salesforce app (Managed package) that will be installed in many subscriber orgs. The app will make callouts (eg. calling REST endpoint) to external Java app. The Java ...
3
votes
1answer
1k views

On password change will user have to re-authenticate on 'Salesforce for Outlook', 'Chatter Desktop', 'Chatter Mobile'?

We have enabled Delegated Authentication in our salesforce org. End users are using various desktop and mobile clients(Salesforce for Outlook, Chatter Desktop, Chatter Mobile etc) to access salesforce....
3
votes
2answers
308 views

Delegated Authentication - Kerberos Ticket

As per the documentation provided on the delegated authentication here https://help.salesforce.com/articleView?id=sso_delauthentication_configuring.htm&type=5 it states that Add a link to your ...
3
votes
2answers
478 views

Query “Client Configuration” from Auth Provider (e.g. “SSO Initialization URL”)

After creating an Auth. Provider (in my case it is Provider Type = "Salesforce"), I am presented in the Setup UI with 5 URLs under "Client Configuration", including the SSO Initialization URL and ...
3
votes
1answer
2k views

Error with JIT Provisioning for Salesforce Community User using SAML

I've create the SSO server in which when logging in, Salesforce will takes care of Finding Account Specify Create the Contact Create the Community User Profile with that Contact. Specify the ...
3
votes
1answer
711 views

SSO: Enable Multiple Configs - considerations

In our Salesforce Org, our internal users sign on via Single Sign On in our Identity Provider, Okta. We are looking use Okta for our partner community users as well, and to do so, we need to add a ...
3
votes
1answer
413 views

JanRain Login Salesforce

Can't we use JanRain for Community Users log-in. I am getting error as "AuthorizationError?ErrorCode=NO_ACCESS&ErrorDescription=User+was+a+portal+user" The custom log-in page is working for ...
3
votes
2answers
172 views

How do I set up SSO using a specific salesforce org as identity provider using OAuth

I have a non-salesforce web application, and I want to secure it so only users of my SF org can use it. The data that I want to protect is stored in the web app, so my SF org should only serve as a ...
3
votes
1answer
2k views

SSO Federation Id and username do not match

SamlError?ErrorCode=12&ErrorDescription=Federation+id+and+username+do+not+match I'm getting this error when I try to log in a user using SSO and JIT, the problem it's just with this user, i ...
3
votes
1answer
1k views

Lock access to a WordPress site using Salesforce Community logins?

I have a WordPress site that I would like to use as a portal for our clients. The portal needs to be restricted (meaning you can't access any of the pages) to only users that have a registered account ...
3
votes
1answer
2k views

Passing Custom Attributes in Canvas App Signed Request

I have set up a Canvas App that is using the Signed Request Access Method. I have defined a Custom Attribute for the app to pull from a Custom User Field. But when I look at the Signed Request from my ...
3
votes
2answers
1k views

SSO Question - Salesforce as IdP - Which login url should a SP redirect to, Community OR my.domian?

I'm trying to setup salesforce as the IdP and allow SP initiated login. I've got it working just fine using SAML 2.0 for normal salesforce users (Licence = Salesforce). However I would also like it to ...
3
votes
1answer
503 views

OAuth with Active Directory Single Sign On

I am writing a Java App that will integrate with Salesforce using OAUTH + REST. In normal circumstances without any single sign on everything is cool. But the same app might be used to work with ...
3
votes
1answer
192 views

Any way to get a mobile friendly login page with a Facebook provider type “Auth. Provider”?

Salesforce's "Facebook" auth provider directs a non-logged in user to the page https://www.facebook.com/login.php that is not very mobile friendly. I see no configuration for this page and appending "?...
3
votes
1answer
1k views

URL redirect with SAML enabled

We are planning to use SSO with SAML. This means, as far am I am aware, that the URL being displayed in the browser will not have the format na1.salesforce.com, but the format of the sub domain being ...
3
votes
2answers
76 views

Custom authentication provider - retrieving a parameter from url in initiate() method

We have a working external identity provider SSO Oauth 2.0 with custom apex provider. (External app redirects to a specific SF community) We need to extend it to accept a custom parameter from the ...
3
votes
0answers
159 views

Single Sign On (SSO) with Active Directory Federation Services (ADFS) as Identity Provider

There are other general questions regarding SSO here and here, but I'm specifically running into this error when using ADFS as the IdP: Incoming SAML message is not properly formatted, or has ...
3
votes
0answers
344 views

What would be the URL for SSO into Trailhead using org login?

I have a salesforce org with SSO set up that triggers (on our network) if you navigate to https://exampleDomain.my.salesforce.com/ (not the real custom domain). The login users use for that org is ...
3
votes
0answers
407 views

User to be redirected to another URL after successful SSO authentication

I want the users to be redirected to another URL (visualforce tab) after successful SSO authentication. We have setup SP initiated SSO. Our Identity provider uses SAML 2.0 and as per a salesforce ...
3
votes
0answers
149 views

Using Salesforce as identity provider for my web app and Community portal

I have a Salesforce Communities site w/ user base set up, and I also have a custom web app (a CMS). I'm trying to allow my customers to log into my web app using their Salesforce username/password, ...
3
votes
0answers
263 views

SSO with multiple domains. How to create Community Sessions for one portal user in salesforce?

There is multiple domains for the communities in the org. User have to be able to have an opportunity to log in into all communities via one. Example : Communities A,B. From external site_X User_1 ...
3
votes
0answers
56 views

When using Salesforce as an Identity Provider, does it authenticate against it's user base?

If I have purchased Salesforce for 10 users, does that means that I can only perform authentication against those 10 users only ? To put it another way, if I have a website that has 1,000 registered ...
3
votes
0answers
346 views

Can you have a salesforce community with multiple Single Sign on Configurations?

Our organization is has multiple clients that we support. We would like to have one community that they all log into for technical support. We have our company's single sign on set up successfully ...