Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
3
votes
1answer
1k views

Single Sign on certificate expiration service interruption

Our organization is using the SF single sign on feature and the IDP certificate is expiring soon. SAML SSO with ADFS are used. We need to minimize the user SSO service interruption and our questions ...
3
votes
0answers
607 views

OpenID Connect's Implicit Flow is available in Salesforce?

I'm trying to login to Salesforce by Implicit Flow using third-party OpenID Provider on localhost. After authentication and authorization on the OP, it responds Access Token and ID Token to ...
3
votes
0answers
898 views

Auth Provider : AuthorizationError?ErrorCode=NO_ACCESS&ErrorDescription=User+was+a+portal+user

I would like to ask you about Auth Provider: I have a Registration Handler in a DE org linked to my Auth provider, it is working correctly and allowing the external users to register. Now I decided ...
3
votes
0answers
282 views

Implementing Custom External Identity Button on Visualforce page

I'm currently trying to implement a button on my organizations customized visualforce page which I want to have the exact same functionality as the button in this screenshot (the googleLogin button, ...
3
votes
0answers
200 views

Not able to see the Service Provider listed under Identity Provider for Single Sign On

Hi All I am facing an Issue while configuring SSO. I have set identity provider and in one org and created Service provider in aother org. However after creating the service provider configuration ...
3
votes
0answers
142 views

Facebook SSO with Portal Users

I am using Facebook as Auth Provider to allow portal users to login into portal org via their facebook credentials. I have successfully implemented that. Now, in Registration Handler, while creating ...
3
votes
0answers
308 views

Configuring and Installing Open SSO

I am trying SSO integration between sales force and open sso but i got struck in configuring Open SSO I followed this link for config. I have installed glass fish and I have started domain but I don'...
3
votes
0answers
898 views

Salesforce SSO using Elastic SSO fails

I have set up the SSO Identity Provider using Elastic SSO and then configured Salesforce as a Service Provider. I also configured the Salesforce Single Sign On Settings. I then try to login and it ...
2
votes
2answers
4k views

How does Salesforce SSO call just-in-time handler methods

I am having a hard time digging up some information on this as I believe it is still relatively new. If you implement SSO with Salesforce you have the ability to enable SAML. I have enabled SAML and ...
2
votes
1answer
1k views

Enable SSO for Salesforce Marketing Cloud

I need to enable Single Sign On for Salesforce Marketing Cloud account where Identity Provider will be a third party and Marketing Cloud will be the Service Provider. I already got SSO Metadata ...
2
votes
1answer
2k views

Salesforce as service provider

We are working on a requirement where "my application" will act as Identity Provider and "Salesforce" as Service Provider. Its a IDP initiated SSO(SAML 2.0 Browser POST). My question is what is that ...
2
votes
1answer
3k views

SAML SSO: Unable to import certificate via Java Keystore file (JKS)

I need to configure Single Sign On based on SAML 2.0 including encryption. Life would be easy if salesforce would allow import of the Identity Provider meta information XML that includes certificates ...
2
votes
1answer
2k views

Is a Registration Handler class required for single sign on?

I was doing single sign on with Facebook using SSO Guide here it says a registration handler is optional. When I did every other setting salesforce was generating an error saying ...
2
votes
3answers
1k views

Need to create a button/link to use SSO into ServiceNow

Trying to create button/link to log into ServiceNow using the user's email address: Basically the link has to be crafted to pass 1) the email address of the person already logged in and 2) a ...
2
votes
1answer
1k views

Redirecting from Salesforce.com to Community without additional login for internal users

Within my Salesforce.com application, a user gets redirected to the SF organisation community when he opens a specific tab. So far the user needs to log in into the community once the browser tries to ...
2
votes
1answer
3k views

How can I get free or trial ExactTarget instance

How can I get free or trial ExactTarget instance. I need to do ExactTarget SAML2.0 Single Sign-On connector development, integration and testing. Is there any step by step documentation available so ...
2
votes
1answer
953 views

Adding a service provider using connected app

i am following the tutorial http://wiki.developerforce.com/page/Implementing_Single_Sign-On_Across_Multiple_Organizations in step 6 when i try to add Service privider in Identity provider .there is no ...
2
votes
2answers
2k views

Possible causes of “invalid assertion” error in SAML assertion oauth flow

I'm trying to get an oauth access token using the SAML Assertion oauth flow and getting back the generic invalid assertion error message. { "error": "invalid_grant", "error_description": "...
2
votes
1answer
944 views

Auth. Provider is not working from Communities for Internal User

I have created Auth. Provider for Google and LinkedIn. We want community user to login/register via Google or LinkedIn. It is working correctly for community users but from community URL internal user ...
2
votes
1answer
1k views

SAML Assertion Signature Validation Error For Community SSO + Custom IDP

I'm attempting to implement SSO for a salesforce sandbox Community instance with a custom Rails app as the IdP, and no matter how I format the SAML Assertion after login I'm redirected to the error ...
2
votes
2answers
48 views

How to enable access to our service using SSO login via Salesforce for Salesforce partners?

We have SSO login setup via Salesforce for our platform, using which any authorised Salesforce user can access our service. In order to achieve this, we send an AuthnRequest to the Http-Redirect url ...
2
votes
2answers
2k views

Add SSO Login button to custom community login page

I would like to customize community login page. At the same time I have enabled SSO authentication for the community. Is it possible to add "SSO Login button" to the custom login page?
2
votes
1answer
648 views

Salesforce Communities - Login With Salesforce

Scenario: I want users to log-in into community via. standard log-in options, + with Salesforce (if they have Salesforce Account) as shown below: Now, in case i choose both the options in Login page ...
2
votes
1answer
301 views

SSO Connect App: “Data Not Available”

We are working in a sandbox and have recreated a connected app we use for SSO. When we try to load the IdP-Initiated Login URL I get a Data Not Available error. I get the same error when I try to ...
2
votes
1answer
138 views

SFDC SSO and credential flow

Can someone provide guidance on how to achieve the following scenario: We have an application which will be secured using an Id Provider (thinktecture v2) and this application will be embedded within ...
2
votes
1answer
3k views

SAML not working, validator passes

We are setting up SSO with a custom SAML identity provider. The SAML validator passes just fine: But then when we try to login, we get: I can't see any error logs anywhere (login/history). The ...
2
votes
1answer
607 views

All SSO's got affected by changing Self Signed Certificate. What do I need to share with Vendors?

Recently, I got an email from Salesforce, notifying that one of my self-signed certificates is going to expire soon. As a solution to this, I created a new self-signed certificate and replaced the ...
2
votes
1answer
560 views

Salesforce as Identity Provider throwing Insufficient Privileges error

We are implementing a SSO integration, where Salesforce act as the Identity Provider and a NodeJs application in Heroku act as the Service Provider. We are following this Github project to build the ...
2
votes
1answer
1k views

Facebook SSO for Salesforce Customer community NO_ACCESS: Unable to find a user

I'm trying to set up Facebook SSO for a Salesforce customer community, and keep running into this error: This is the url of the error: https://volunteer.madd.org/_nc_external/identity/sso/ui/...
2
votes
1answer
376 views

Multi-Provider Single Sign-on - additional login page and buttons shows up

I have Multi-Provider Single Sign-on configured on my org, result of this is an additional button appearing on the login page as below. I wasn't expecting that, thought that user will be automatically ...
2
votes
2answers
507 views

Leaderboard component of the community

The Reputation Leaderboard component populates for users when they go to community without logging in. But when they login all entries from the Reputation Leaderboard component disappear. When the ...
2
votes
1answer
660 views

Use of the “Aloha SSO” button that sometimes appears on Login Screen

I see this button when I call the login page from a Google Chrome Incognito modus and can't make any sense out of it.
2
votes
1answer
717 views

How to implement SSO without custom domain

We need to implement single sign-on in production instance. We already done configurations on sandbox using federated authentication. What we need to do is when a user visit to login.salesforce.com, ...
2
votes
1answer
54 views

Facebook Auth Provider status

I've successfully develop Facebook Single Sign-On. The question is: is it possibile to send a "status" parameter in the requesting URL? I mean something like "https://test.salesforce.com/services/auth/...
2
votes
2answers
778 views

Configure SSO to Sharepoint with Salesforce as an IdP without using ADFS 2.0. Is this possible?

We have external users who use a Sharepoint based website. The users are stored in a SQLServer database. We also use SalesForce's service cloud. Users register and login to each of these services ...
2
votes
1answer
191 views

Google app engine setup from checkout project from svn

I am trying to do salesforce Single sign on using google app engine. I am refering this document Single Sign On . In this document I am stuck on Google App Engine set up. in first point 1) Create a ...
2
votes
1answer
74 views

how to measure SSO success?

I want to get a sense of how many users are using SSO, is there a way to get those #'s? Better yet- Could I get a list of users who are not using SSO, and logging in normally? One little caveat is ...
2
votes
1answer
970 views

Connected app and oauth in a SSO enabled org

I am working with a co worker and he is using connected app and all is setup fine (assuming?) He has client secret/ customer Key etc.. Since my org is single sign on enabled will I still use https://...
2
votes
1answer
970 views

Testing Strategies for SSO with SAML

We're looking to implement SSO with SAML for our org. he set up isn't too bad, but I'm struggling with identifying the right test cases. In terms our implementation, we are publishing the "My Domain"...
2
votes
1answer
28 views

Is there a need to renew the Self Signed Cert for Single Sign On if Salesforce is not the Identity Provider?

Based on this help article and this community post, can we allow the Self Signed Cert within Salesforce to expire if we do not use Salesforce for an Identity Provider? Is there any harm in doing this? ...
2
votes
0answers
81 views

Authenticate Connected App (Mobile) with Single Sign on

I have a mobile app that uses OAuth to login users. That part works really well, but recently I was asked to make it work for SSO (Single Sing-On). The app as it is has a weird behavior. To be able to ...
2
votes
0answers
101 views

OpenID Single Sign On - Change Authentication Flow

I have an Auth Provider created with OpenID and everything is working good. But, I would like to change the Authentication Flow from web server to user-agent Source: https://help.salesforce.com/...
2
votes
0answers
25 views

Can Social Logon be used directly from a native mobile app?

We have a Customer Community with Facebook and Google set up as Auth Providers. In addition, we have a mobile app that connects to Salesforce using OAuth towards this community. This all works fine. ...
2
votes
1answer
194 views

Issues with start url when setting up salesforce as IdP for Office365

I have been trying to setup Salesforce as Identity Provider for Office 365 apps as per the article using SAML. I have setup start url as https://login.microsoftonline.com/login.srf?msg=AuthnReq&...
2
votes
0answers
41 views

Facebook and Salesforce SSO

We are implementing Salesforce and Facebook SSO integration for communities. Do anyone know how to handle the registration process when the Facebook user signed up for facebook by using the mobile ...
2
votes
0answers
99 views

Redirection to lightning app using apex or configuration change — lightning only

We have 2 different lightning app. we are sso enabled organization now planning to sso from another place. Is there any way to redirect the user to the different lightning app after sso validation ...
2
votes
1answer
266 views

Service accounts with Salesforce and Okta SAML for everything else

How are people using Okta or other SSO providers to manage both service accounts and user accounts? For user accounts I'm clear on configuring SAML. For Service Accounts, how are you then disabling ...
2
votes
0answers
276 views

Single Sign on with Communities and Azure AD

We are in the process of setting up Single Sign on for customer communities but we have an issue in getting it to work. We already set up Single Sign on with Azure AD for our internal Salesforce users ...
2
votes
0answers
92 views

How to create a force.com project in a SSO sandbox

Recently, we enabled Single Sign On in one of our sandbox. When I try to refresh metadata using Eclipse, I am getting following error. I have tried by specifying different environment which matches ...
2
votes
1answer
389 views

Community login without redirecting user to Salesforce with SSO or OAuth

We are building a Drupal site for one of our customers. Our customer wants to use the Salesforce self-registration and community login features for authenticating their customers to the CMS. As far ...