Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
3
votes
1answer
1k views

URL redirect with SAML enabled

We are planning to use SSO with SAML. This means, as far am I am aware, that the URL being displayed in the browser will not have the format na1.salesforce.com, but the format of the sub domain being ...
3
votes
0answers
114 views

Including SSO in a managed package

We have a Salesforce Managed Package, and we'd like to use it to provide access to a non-Salesforce service (in this case Tableau). The ISVForce Guide indicates that you can package SAML SSO config in ...
3
votes
0answers
39 views

parameters of createUser method in samlJitHandler [duplicate]

the syntax of createUser method in samlJitHandler class is createUser(Id samlSsoProviderId, Id communityId, Id portalId,String federationIdentifier, Map<String, String> ...
3
votes
2answers
365 views

Custom authentication provider - retrieving a parameter from url in initiate() method

We have a working external identity provider SSO Oauth 2.0 with custom apex provider. (External app redirects to a specific SF community) We need to extend it to accept a custom parameter from the ...
3
votes
0answers
378 views

What would be the URL for SSO into Trailhead using org login?

I have a salesforce org with SSO set up that triggers (on our network) if you navigate to https://exampleDomain.my.salesforce.com/ (not the real custom domain). The login users use for that org is ...
3
votes
0answers
398 views

Single Sign on with Communities and Azure AD

We are in the process of setting up Single Sign on for customer communities but we have an issue in getting it to work. We already set up Single Sign on with Azure AD for our internal Salesforce users ...
3
votes
0answers
604 views

User to be redirected to another URL after successful SSO authentication

I want the users to be redirected to another URL (visualforce tab) after successful SSO authentication. We have setup SP initiated SSO. Our Identity provider uses SAML 2.0 and as per a salesforce ...
3
votes
1answer
460 views

Community login without redirecting user to Salesforce with SSO or OAuth

We are building a Drupal site for one of our customers. Our customer wants to use the Salesforce self-registration and community login features for authenticating their customers to the CMS. As far ...
3
votes
1answer
326 views

is it possible to embed a thirparty SSO page in lightning?

is it possible whenever the user clicks on the particular link a new lightning tab needs to be opened with the embeded SSOed thirdparty page.
3
votes
0answers
338 views

SSO with multiple domains. How to create Community Sessions for one portal user in salesforce?

There is multiple domains for the communities in the org. User have to be able to have an opportunity to log in into all communities via one. Example : Communities A,B. From external site_X User_1 ...
3
votes
0answers
57 views

When using Salesforce as an Identity Provider, does it authenticate against it's user base?

If I have purchased Salesforce for 10 users, does that means that I can only perform authentication against those 10 users only ? To put it another way, if I have a website that has 1,000 registered ...
3
votes
0answers
393 views

Can you have a salesforce community with multiple Single Sign on Configurations?

Our organization is has multiple clients that we support. We would like to have one community that they all log into for technical support. We have our company's single sign on set up successfully ...
3
votes
1answer
1k views

Single Sign on certificate expiration service interruption

Our organization is using the SF single sign on feature and the IDP certificate is expiring soon. SAML SSO with ADFS are used. We need to minimize the user SSO service interruption and our questions ...
3
votes
0answers
795 views

OpenID Connect's Implicit Flow is available in Salesforce?

I'm trying to login to Salesforce by Implicit Flow using third-party OpenID Provider on localhost. After authentication and authorization on the OP, it responds Access Token and ID Token to ...
3
votes
0answers
1k views

Auth Provider : AuthorizationError?ErrorCode=NO_ACCESS&ErrorDescription=User+was+a+portal+user

I would like to ask you about Auth Provider: I have a Registration Handler in a DE org linked to my Auth provider, it is working correctly and allowing the external users to register. Now I decided ...
3
votes
0answers
291 views

Implementing Custom External Identity Button on Visualforce page

I'm currently trying to implement a button on my organizations customized visualforce page which I want to have the exact same functionality as the button in this screenshot (the googleLogin button, ...
3
votes
0answers
142 views

Facebook SSO with Portal Users

I am using Facebook as Auth Provider to allow portal users to login into portal org via their facebook credentials. I have successfully implemented that. Now, in Registration Handler, while creating ...
3
votes
0answers
331 views

Configuring and Installing Open SSO

I am trying SSO integration between sales force and open sso but i got struck in configuring Open SSO I followed this link for config. I have installed glass fish and I have started domain but I don'...
3
votes
0answers
907 views

Salesforce SSO using Elastic SSO fails

I have set up the SSO Identity Provider using Elastic SSO and then configured Salesforce as a Service Provider. I also configured the Salesforce Single Sign On Settings. I then try to login and it ...
2
votes
1answer
3k views

Enable SSO for Salesforce Marketing Cloud

I need to enable Single Sign On for Salesforce Marketing Cloud account where Identity Provider will be a third party and Marketing Cloud will be the Service Provider. I already got SSO Metadata option ...
2
votes
2answers
5k views

How does Salesforce SSO call just-in-time handler methods

I am having a hard time digging up some information on this as I believe it is still relatively new. If you implement SSO with Salesforce you have the ability to enable SAML. I have enabled SAML and ...
2
votes
1answer
2k views

Salesforce as service provider

We are working on a requirement where "my application" will act as Identity Provider and "Salesforce" as Service Provider. Its a IDP initiated SSO(SAML 2.0 Browser POST). My question is what is that ...
2
votes
1answer
3k views

SAML SSO: Unable to import certificate via Java Keystore file (JKS)

I need to configure Single Sign On based on SAML 2.0 including encryption. Life would be easy if salesforce would allow import of the Identity Provider meta information XML that includes certificates ...
2
votes
1answer
3k views

Is a Registration Handler class required for single sign on?

I was doing single sign on with Facebook using SSO Guide here it says a registration handler is optional. When I did every other setting salesforce was generating an error saying ...
2
votes
3answers
1k views

Need to create a button/link to use SSO into ServiceNow

Trying to create button/link to log into ServiceNow using the user's email address: Basically the link has to be crafted to pass 1) the email address of the person already logged in and 2) a ...
2
votes
2answers
954 views

How to exclude API users from Federated SSO

We have implemented Federated SSO for all our users with our Identity management and got stuck with few API users who interact with salesforce with API only, how can we exclude certain users from SSO ...
2
votes
1answer
2k views

Auth. Provider is not working from Communities for Internal User

I have created Auth. Provider for Google and LinkedIn. We want community user to login/register via Google or LinkedIn. It is working correctly for community users but from community URL internal user ...
2
votes
1answer
1k views

Redirecting from Salesforce.com to Community without additional login for internal users

Within my Salesforce.com application, a user gets redirected to the SF organisation community when he opens a specific tab. So far the user needs to log in into the community once the browser tries to ...
2
votes
2answers
3k views

How can I get free or trial ExactTarget instance

How can I get free or trial ExactTarget instance. I need to do ExactTarget SAML2.0 Single Sign-On connector development, integration and testing. Is there any step by step documentation available so ...
2
votes
1answer
991 views

Adding a service provider using connected app

i am following the tutorial http://wiki.developerforce.com/page/Implementing_Single_Sign-On_Across_Multiple_Organizations in step 6 when i try to add Service privider in Identity provider .there is no ...
2
votes
2answers
1k views

Sandbox settings in Single sign on org

I created a new sandbox for my org. I am trying to activate a developer sandbox and I am struck there. All I see is a refresh link and login link. I am unable to see the activation link. I have ...
2
votes
1answer
258 views

Disabling Direct Login

For the past couple months our team has been working to enforce SSO only authentication via OKTA. We've played around with a couple ideas ranging from delegated authentication, federated ...
2
votes
1answer
24 views

Does SSO using Federated Authentication respect org-wide password policies?

We have Federated Authentication implemented for our SSO and therefore a separate set of password policies are being applied from the client app. I found this SF article but it is only referring to ...
2
votes
1answer
534 views

Is Custom Domain required in SF when implementing SSO where SF is the Service Provider?

I think My Domain is only required when SF is the IdP of a SSO solution and not strictly required when SF is the Service Provider.
2
votes
2answers
3k views

Possible causes of “invalid assertion” error in SAML assertion oauth flow

I'm trying to get an oauth access token using the SAML Assertion oauth flow and getting back the generic invalid assertion error message. { "error": "invalid_grant", "error_description": "...
2
votes
1answer
2k views

SAML Assertion Signature Validation Error For Community SSO + Custom IDP

I'm attempting to implement SSO for a salesforce sandbox Community instance with a custom Rails app as the IdP, and no matter how I format the SAML Assertion after login I'm redirected to the error ...
2
votes
1answer
181 views

Why can't I update a Community Users ProfileID during JIT provisioning via SAML SSO?

My Attributes: {"Contact.Account", "001230942830"}, {"Contact.Email", "theEmail@gmail.com"}, {"Contact.FirstName", "theFirstName"}, {"Contact.LastName", "theLastName"}, {"User....
2
votes
2answers
52 views

How to enable access to our service using SSO login via Salesforce for Salesforce partners?

We have SSO login setup via Salesforce for our platform, using which any authorised Salesforce user can access our service. In order to achieve this, we send an AuthnRequest to the Http-Redirect url ...
2
votes
3answers
2k views

Add SSO Login button to custom community login page

I would like to customize community login page. At the same time I have enabled SSO authentication for the community. Is it possible to add "SSO Login button" to the custom login page?
2
votes
1answer
683 views

Salesforce Communities - Login With Salesforce

Scenario: I want users to log-in into community via. standard log-in options, + with Salesforce (if they have Salesforce Account) as shown below: Now, in case i choose both the options in Login page ...
2
votes
1answer
352 views

SSO Connect App: “Data Not Available”

We are working in a sandbox and have recreated a connected app we use for SSO. When we try to load the IdP-Initiated Login URL I get a Data Not Available error. I get the same error when I try to ...
2
votes
1answer
145 views

SFDC SSO and credential flow

Can someone provide guidance on how to achieve the following scenario: We have an application which will be secured using an Id Provider (thinktecture v2) and this application will be embedded within ...
2
votes
1answer
4k views

SAML not working, validator passes

We are setting up SSO with a custom SAML identity provider. The SAML validator passes just fine: But then when we try to login, we get: I can't see any error logs anywhere (login/history). The ...
2
votes
1answer
293 views

Salesforce as identity provider - implementing Single Logout (django + pysaml2)

Related question: https://stackoverflow.com/questions/47293940/sp-initiated-single-logout-not-working-with-salesforce I'm implementing single-sign-on service using Salesforce as identity provider. My ...
2
votes
1answer
251 views

How to get the public key in form of JWS Key set

I have a JWT Class which generates JWT Token using Private key. Now, I need to expose an endpoint for exernal application to get the public key in the form of JWKS KeySet. Can anyone guide me how to ...
2
votes
2answers
1k views

All SSO's got affected by changing Self Signed Certificate. What do I need to share with Vendors?

Recently, I got an email from Salesforce, notifying that one of my self-signed certificates is going to expire soon. As a solution to this, I created a new self-signed certificate and replaced the ...
2
votes
1answer
817 views

Salesforce as Identity Provider throwing Insufficient Privileges error

We are implementing a SSO integration, where Salesforce act as the Identity Provider and a NodeJs application in Heroku act as the Service Provider. We are following this Github project to build the ...
2
votes
1answer
1k views

Facebook SSO for Salesforce Customer community NO_ACCESS: Unable to find a user

I'm trying to set up Facebook SSO for a Salesforce customer community, and keep running into this error: This is the url of the error: https://volunteer.madd.org/_nc_external/identity/sso/ui/...
2
votes
1answer
527 views

Multi-Provider Single Sign-on - additional login page and buttons shows up

I have Multi-Provider Single Sign-on configured on my org, result of this is an additional button appearing on the login page as below. I wasn't expecting that, thought that user will be automatically ...
2
votes
2answers
611 views

Leaderboard component of the community

The Reputation Leaderboard component populates for users when they go to community without logging in. But when they login all entries from the Reputation Leaderboard component disappear. When the ...

1 2
3
4 5
10