Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
2
votes
0answers
92 views

How to create a force.com project in a SSO sandbox

Recently, we enabled Single Sign On in one of our sandbox. When I try to refresh metadata using Eclipse, I am getting following error. I have tried by specifying different environment which matches ...
2
votes
1answer
390 views

Community login without redirecting user to Salesforce with SSO or OAuth

We are building a Drupal site for one of our customers. Our customer wants to use the Salesforce self-registration and community login features for authenticating their customers to the CMS. As far ...
2
votes
0answers
44 views

Does using Environment Hub negate need for SSO in sandbox

I'm testing SSO w openId connect (Azure AD as auth provider) I'm trying to better understand how I should set it up so that I can use SSO to authenticate to sandboxes that are spun up from prod. I'm ...
2
votes
0answers
318 views

Is there is any way to get the Auth.userdata data return by facebook ( single sign-on) in salesforce?

Auth data received in debug is null DEBUG|DATA:::::UserData:[attributeMap={id=1124567878765, name=test , sfdc_networkid=98394580535tF}, email=null, firstName=null, fullName=test ABC, ...
2
votes
0answers
93 views

SAML SSO SFDS as IdP

Our requirement is to call an external web API with Salesforce generated SAML assertion then the API will return an authentication token for invoking subsequent other web services to retrieve data and ...
2
votes
0answers
26 views

Salesforce SSO with Microsoft AD : can some Salesforce users be under SSO control, and others not?

We have some users worldwide who are connected to one Microsoft AD server, others who are not connected. In Salesforce, can we have the first family of users use SSO under control of SSO, and the ...
2
votes
0answers
231 views

How to know whether SSO is enabled for current user?

I am trying to reset password for users. My requirement is : When I create user through code(where input is grabbed through custom UI form), a mail should be triggered, to user which contains a link ...
2
votes
0answers
102 views

How to force log out of Service Provider orgs when logging out of Identity Provider org?

Scenario: Hub and spoke org strategy with one Salesforce org acting as a SAML IdP for the other N orgs. Is there a way to force a log out on the SPs when a user manually logs out of the IdP org? I ...
2
votes
1answer
576 views

SP-initiated and IdP-initiated SSO lands on different landing page

I have SAML based SSO authenitcation set in Salesforce. SSP Initiated and IDP initiated SSO lands on different landing pages. I am aware that relay state parameter would decide the landng page for ...
2
votes
1answer
105 views

Single Sign-On - How to Force User First be Connected to Corporate Network?

In this Frequently Asked Questions article, there is a question Does single sign-on work outside my corporate firewall?" The answer is : Yes, single sign-on can work outside your corporate ...
2
votes
0answers
432 views

How to write test class for auto-generated JIT Class SSO

private void handleUser(boolean create, User u, Map<String, String> attributes,String federationIdentifier, boolean isStandard) I am just creating a user in SSO JIT using this handleuser method....
2
votes
1answer
443 views

Using refreshToken in Marketing Cloud SSO Session

We've created an app for HubExchange which is now listed. When a user opens the app, we receive the encoded JWT payload through the application login endpoint as documented here. We decode this ...
2
votes
0answers
1k views

Salesforce SSO and SimpleSAMLphp - Assertion OK, Login failed

I am trying to setup SSO between a LAMP website and SalesForce by using SimpleSAMLphp v.1.13.2. I have followed this tutorial: https://salesforce-developer.net/salesforce-sso-with-simplesamlphp SAML ...
2
votes
0answers
25 views

How do I update Mass Edit/Update app to reference a different domain?

We recently implemented a vanity URL (MyDomain) and SAML SSO (Okta) and now the Mass Edit and Mass Update apps don't work. When logged in to Salesforce, if I try to launch either from an Account or ...
2
votes
0answers
274 views

Salesforce as IdP for Aha.io - Single Sign-On Error: Invalid HTTP Method

I'm completely new to SSO, so please bare with me... I am trying to setup Salesforce as the IDP using SAML 2.0 for a third party application called Aha.io. I've followed this guide to Enable ...
2
votes
1answer
93 views

Social login redirect

This is my first contact with salesforce, so please don't get mad at my silly questions :) I am struggling to configure a login with facebook using salesforce. I went trough the example and I got it ...
2
votes
0answers
121 views

Salesforce SSO using ADFS

We have implemented Salesforce SSO for our Salesforce instance which is partially functional. If we use the the SSO configuration in Salesforce which is enabled as a button at the bottom of the ...
2
votes
0answers
2k views

Why might a certificate import fail, when uploading a certificate not created from a Salesforce-generated Certificate Signing Request?

I've been given two X509 certificates to upload into an org for use in SSO (one for signing, one for decrypting), but I can't seem to upload either of them successfully. As I've been given the ...
2
votes
1answer
2k views

SAML SSO: Encrypted SAML Assertion with salesforce user id as Attribute

I'm using a Shibboleth IDP to authenticate to Salesforce as the service provider. My desired implementation would be to have the IDP encrypt the SAML Assertion AND provide the identity (salesforce ...
2
votes
0answers
1k views

How is the effect for refreshing sandboxes once we enable SSO in production?

I have deployed a domain in the production and configured SSO on it. I need to know, how is the url of refreshing sandboxes and can we configure SSO both sandboxes and production parallel?
2
votes
0answers
822 views

Configuring Single Sign-On Authentication via SAML 2.0

We are trying to configure Single Sign-On Authentication via SAML 2.0. We have tried with two different XML metadata, one of them the example given for ExactTarget in WEB and other XML created by us. ...
2
votes
1answer
578 views

Best practice for new user notification when using Federated SSO

When new users are provisioned in SFDC from the standard UI, there is a checkbox for "Generate new password and notify user immediately". This sends an email to the new user with all his/her info. ...
2
votes
1answer
224 views

I am facing issue to map social user with Salesforce community user when using Sales Force Social sign-on

My Use Case 1. Sales Rep created a customize page for customer. 2. Shared same customize page with customer(Created community user for customer). Customer Email id or username is abc@abc.com in ...
2
votes
0answers
49 views

Is it possible to provide authentication when our Identity Provider (ADFS) is unavailable?

We have enabled SSO on our site, which is working as expected but sometime ago I found myself in a situation where my users are not able to access site since ADFS server is unavailable. Is there a ...
2
votes
0answers
107 views

SSO breaks sometimes

I use ASP.MVC as identity provider and integrated salesforce page as iframe so that customers get seamless flow. It works first time the page is openned after user logs into MVC site. But when they ...
2
votes
1answer
392 views

Username-Password Oauth vs SAML for Salesforce

I am using Username-Password flow to display our Salesforce data to people who visit our website. I am looking for more secure way to display the data without people without Salesforce credentials to ...
2
votes
1answer
173 views

Where is the IdP Initiated URL for Connected Apps?

Since Winter 14, Service Providers can no longer be added via the Identity Provider page. We need to add them under Connected Apps. Till Summer 13, we could get the IdP Initiated URL from the Service ...
2
votes
0answers
48 views

Need to get a ServiceProvider Certificate

I am working on Single-Sign-on concept using Federated Authentication Id from One Salesforce Org to another Org. In this concept where to be get the Service Provider Certificate at the time of ...
2
votes
0answers
269 views

single sign on org and approval emails

The more and more I deal with SSO I am finding it requiring special care for existing OOB functionality. When we send out an approval email we send the link of the oppty record to the user and ask ...
2
votes
1answer
135 views

Enable SSO in Salesforce Mobile on Andriod device

We are using Federated authentication for SSO and now I want this SSO in Salesforce mobile app running in Andriod devices.We were able to setup SSO in IOS devices ,but it is not allowing us to set ...
2
votes
0answers
1k views

SSO with ADFS 2.0

I am setting up SSO with ADFS 2.0. Have followed these instructions: http://blog.rhysgoodwin.com/cloud/salesforce-sso-with-adfs-2-0-everything-you-need-to-know/ And everything was working fine until ...
1
vote
1answer
81 views

Single Sign-On for Marketing Cloud

Using Single Sign-On for Marketing Cloud, how are the Marketing Cloud roles managed? From Marketing Cloud as a standard user or from Sales Cloud? I've never implemented it and after reading the ...
1
vote
1answer
193 views

How to setup Salesforce Identity Provider to work with Twilio Flex

What is the process to setup Salesforce Identity Provider to work with a 3rd party like Twilio Flex? Whenever I try to login, I get this error: Incorrect HTTP Method
1
vote
1answer
451 views

Single Sign on in sandbox

I am attempting to configure single sign on in our org. We are using Azure DevOps as the provider. We need to test in our sandbox before we deploy this feature to production. We have single sign on ...
1
vote
1answer
891 views

Federated SSO for salesforce1

I have configured Federated SSO with ADFS successfully. But we use sso on salesforce1 it will redirect to the full UI instead of the mobile UI. Salesforce document says we need to handle the ...
1
vote
1answer
33 views

Marketing Cloud Tab in SFDC

Would it be possible to have a MC tab in SFDC? Or at least a tab when clicked would open marketing cloud tab in another window? (The user should also be logged in automatically as we are thinking ...
1
vote
1answer
172 views

Disable forgot password for SSO Users

We have enabled SSO for our users. How can I prevent users from using salesforce login(login.salesforce.com) if they know saleforce password from before setting up sso or if they reset their password ...
1
vote
1answer
302 views

Integrate third party app with Salesforce ensuring a seamless experience

I wrapping up a proposal for a client and I'm facing some integration architectural issues. I really need your help! The client has a self-care website and three mobile apps (android, Windows Mobile, ...
1
vote
2answers
2k views

Cannot delete Single Sign-on Settings

Under Administration Setup - Security Controls - Single Sign-On Settings, I need to turn off Federated Single Sign-On Using SAML. However, whenever I disable the SAML Enabled checkbox and click [Save],...
1
vote
1answer
4k views

How do I bypass Salesforce login to do SSO with Identity Provider

I am integrating an ASP.MVC site with Salesforce. The front end is an existing ASP site with iframes in some places that lead to Salesforce. ASP side is also the Identity Provider. I have set up ...
1
vote
1answer
3k views

How to do delegated authentication in salesforce

I am implementing SSO, the documents which are avaliable via Salesforce.com are hard to understand. Does anybody know an easy to understand document or blog where I can study and implement it. Thanks ...
1
vote
2answers
1k views

Can I create SSO with AD without having an ADFS?

I received a requirement from my client to create SSO from salesforce to their AD. They do not have an ADFS server and did not provide a certificate nor the issuer (the IDP URL). the client says he ...
1
vote
1answer
32 views

Do SSO users need to have a password already?

This is basically for confirmation, but I might be wrong. If I'm trying to get certain users to use SSO only, I don't need to have them set up a Salesforce password correct? I'm under the impression ...
1
vote
1answer
257 views

Marketing Cloud Download Metadata for Single Sign-On (SSO)

In the Single Sign-On documentation, it states there is a Download Metadata link available to retrieve metadata needed to setup SSO. I don't see this anywhere in the Security Settings in Admin. ...
1
vote
1answer
122 views

Salesforce SSO appending user id to the user name

I'm trying to setup sp initiated SSO with salesforce as the iDP. The service is expecting the username to be in the response but salesforce is sending the org id appended to the user name so instead ...
1
vote
1answer
216 views

SSO - delegated/federated limitations with community

I'm looking into implementing SSO for customer community. I've been reading the documentation on SSO implementation using either delegated or federated authentication. I have not done SSO before so I'...
1
vote
1answer
469 views

Journey Builder Custom Activity: How to secure the UI endpoint url?

I created another post to ask how to load data extension in Custom Activity UI. Now another question: how can I secure the endpoint page, so I know it is from that Marketing Cloud Journey Builder ...
1
vote
1answer
661 views

Really stuck & need some help creating Apex Test class for JIT Class (Auth.SamUtiHandler)

Stuck creating Test Class for Custom Just In Time Handler (Auth.SamlJitHandler) I am doing a PoC and have implemented a custom handler for JIT - see below global class CustomJITRegHandler implements ...
1
vote
2answers
329 views

Help with SAML and Single Sign On configuration

I`m new to SAML/SSO configuration and I was wondering if someone can point me in right direction. I have a requirement where I need to configure a third party app as a service provider (Salesforce to ...
1
vote
1answer
943 views

Unable to query FederationIdentifier on case owner

[select FederationIdentifier from user limit 15] The above query works perfectly fine on user object workbench and developer console but when I write below query to pull list of cases along with user ...