Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
1
vote
1answer
33 views

Do SSO users need to have a password already?

This is basically for confirmation, but I might be wrong. If I'm trying to get certain users to use SSO only, I don't need to have them set up a Salesforce password correct? I'm under the impression ...
1
vote
1answer
363 views

Marketing Cloud Download Metadata for Single Sign-On (SSO)

In the Single Sign-On documentation, it states there is a Download Metadata link available to retrieve metadata needed to setup SSO. I don't see this anywhere in the Security Settings in Admin. ...
1
vote
1answer
149 views

Salesforce SSO appending user id to the user name

I'm trying to setup sp initiated SSO with salesforce as the iDP. The service is expecting the username to be in the response but salesforce is sending the org id appended to the user name so instead ...
1
vote
1answer
244 views

SSO - delegated/federated limitations with community

I'm looking into implementing SSO for customer community. I've been reading the documentation on SSO implementation using either delegated or federated authentication. I have not done SSO before so I'...
1
vote
1answer
520 views

Journey Builder Custom Activity: How to secure the UI endpoint url?

I created another post to ask how to load data extension in Custom Activity UI. Now another question: how can I secure the endpoint page, so I know it is from that Marketing Cloud Journey Builder ...
1
vote
1answer
740 views

Really stuck & need some help creating Apex Test class for JIT Class (Auth.SamUtiHandler)

Stuck creating Test Class for Custom Just In Time Handler (Auth.SamlJitHandler) I am doing a PoC and have implemented a custom handler for JIT - see below global class CustomJITRegHandler implements ...
1
vote
2answers
340 views

Help with SAML and Single Sign On configuration

I`m new to SAML/SSO configuration and I was wondering if someone can point me in right direction. I have a requirement where I need to configure a third party app as a service provider (Salesforce to ...
1
vote
1answer
2k views

SAML SSO Just In Time Provisioning failing with no error information?

I've got SSO using SAML setup and working fine, and am trying now to get it so JIT provisioning is working as well, so users in my company can easily be created/updated in Salesforce automatically ...
1
vote
1answer
1k views

Unable to query FederationIdentifier on case owner

[select FederationIdentifier from user limit 15] The above query works perfectly fine on user object workbench and developer console but when I write below query to pull list of cases along with user ...
1
vote
1answer
270 views

can 1 ADFS support multiple org?

Hi I have ADFS setup for 1 of my org and its working fine, now i would like to add another org to the same ADFS server, can it be done? As I got told that only 1 org can be setup in ADFS server as it ...
1
vote
1answer
569 views

Can we add one federation Id for multiple account names?

I have implement federated SSO in production instance. In our organization some of users have multiple salesforce accounts. Therefore I need to add one federationId for multiple user accounts? Is it ...
1
vote
1answer
269 views

SSO for Composite Apps using SAML or OAuth

We have a SaaS running on AWS that we want to integrate with Salesforce. In a first step we want to add a web tab to the Salesforce UI and have a single-sign-on with our application so that if ...
1
vote
1answer
183 views

Salesforce Single Sign on metadata file's binding method can't change in to http redirect

When I'm changing Service Provider Initiated Request Binding in to http redirect it's saving and displaying as http redirect. But when I looking in the metadata file it shows as below. Binding="urn:...
1
vote
1answer
655 views

Securing composite app single sign on with salesforce session Id

We currently have an integration with our external platform inside salesforce by using IFrames. For authentication we pass the Salesforce session as a query string parameter inside the IFrame address ...
1
vote
1answer
27 views

How Do I Enable SAML IdP in a Customer Community?

Our Client need to setup an SSO for their customers from the Salesforce Customer Community portal into another web application using SAML. We are familiar with enabling Salesforce as an IdP for ...
1
vote
1answer
31 views

Single Sign On - Mobile App

We have configured SSO through Azure. Conditional access policy token for this application is configured for 24 hours. Application timeout is set for 2 hours. The Mobile App stays connected as ...
1
vote
1answer
63 views

Why doesn't https://mydomain.my.salesforce.com/?login work when single signon is enabled?

The Best Practices and Tips for Implementing Single Sign-On states: System admins must always be able to log in to Salesforce, even if SSO is enabled for their accounts. For example, you need a ...
1
vote
1answer
145 views

Salesforce as identity provider - implementing Single Logout (django + pysaml2)

Related question: https://stackoverflow.com/questions/47293940/sp-initiated-single-logout-not-working-with-salesforce I'm implementing single-sign-on service using Salesforce as identity provider. My ...
1
vote
1answer
95 views

Just-in-Time Provisioning for Communities Mixed DML Error

We are trying to implement Just-in-Time Provisioning for Communities using custom handler class. There are 3 scenarios When Contact with the provided email (Federation ID) exist in salesforce and ...
1
vote
1answer
134 views

Can we use frontdoor.jsp to give access to salesforce vf page, without using username and password?

If the SSO is set up, can we use frontdoor.jsp without using Username password? I would like to access the second salesforce org from first salesforce org. SSO has been set up already. Canvas ...
1
vote
1answer
82 views

Consume external REST API user-aware (without having to re-login)

I have an Apex class that is consuming a partners REST webservices. Currently all users of my app (in the installed org) access the service via a single API Integration user. We now want make the ...
1
vote
2answers
346 views

Salesforce SSO - unique usernames needed between Sandbox and prod environment?

Our team is trying Salesforce and we have a sandbox and a production Salesforce. To use SSO (Okta) are we able to use same SSO login to both environments? Because email address to my knowledge has to ...
1
vote
1answer
267 views

Is Custom Domain required in SF when implementing SSO where SF is the Service Provider?

I think My Domain is only required when SF is the IdP of a SSO solution and not strictly required when SF is the Service Provider.
1
vote
1answer
236 views

Sales Force Marketing Cloud Entity ID

For the SSO setup for SFMC Exact Target, where to find the Entity id . Followed this document to create SSO meta data https://help.salesforce.com/articleView?id=mc_overview_create_salesforce_saml_key....
1
vote
1answer
3k views

Salesforce No_Oauth_State, State not valid

I'm using Open Id for Salesforce, I followed the Doc from https://help.salesforce.com/articleView?id=sso_provider_azure.htm and could able to login to Salesforce using Azure AD credentials ...
1
vote
2answers
336 views

Salesforce (as IdP) returns error response to every SAML Single Logout request

I'm having trouble getting Salesforce SAML single logout (SLO) working. I'm writing a web application that uses Salesforce as the SAML Identitiy Provider (IdP) Every LogoutRequest I send gets a ...
1
vote
1answer
221 views

Need Single Sign on related clarification

We have a custom portal in which there are links to some salesforce pages which are part of a customer community. Users have to be logged into the custom portal in order to access salesforce(custom ...
1
vote
2answers
669 views

How to exclude API users from Federated SSO

We have implemented Federated SSO for all our users with our Identity management and got stuck with few API users who interact with salesforce with API only, how can we exclude certain users from SSO ...
1
vote
1answer
97 views

Cannot see Pardot Activities in Salesforce Contact/Lead Record. Keeps getting prompted to enter Pardot credentials

I have set up Salesforce Connector in Pardot and and also have Pardot App in my Salesforce Org. I have set up Pardot Activites Vf Page in Contact and Lead. And every time it prompts me to enter the ...
1
vote
1answer
357 views

Is this possible to configure Single Sign On between Salesforce Sandbox and Marketing Cloud?

I am trying to configure Single Sign On between Salesforce Sandbox and Marketing Cloud Organization following this document. I receive error message Provided federation ID could not be found, or ...
1
vote
1answer
928 views

Single Sign-On Error when viewing Subscriber org in LMA

I am getting a Single Sign-On Error when attempting to view one specific Subscriber Organization in the LMA (License Management Application) The error message is: We can't log you in. Check for an ...
1
vote
1answer
41 views

Is there any possible way to create a Certificate with more than 2 years?

For single-sign-on authenticate, a certificate is being made but it has only 1 year of expiry. That's why the user is getting an email regarding expiry. Is there any other way out for automatic ...
1
vote
1answer
829 views

SP-initiated SAML Logout Request - is this supported?

I have Salesforce set up as an IdP, with a custom app acting as the SP. I have SP-initiated login via SAML implemented, following this guide. I'd like to enable SP-initiated logout as well, but I ...
1
vote
1answer
60 views

Can I login at login.salesforce.com when MyDomain SAML is broken?

I'm setting up Single Sign On using SAML 2 on Salesforce, and had it working fine, and am forcing users to login at the Identity Provider. But I made a mistake and changed my SAML to using "Just in ...
1
vote
1answer
147 views

Why can't I update a Community Users ProfileID during JIT provisioning via SAML SSO?

My Attributes: {"Contact.Account", "001230942830"}, {"Contact.Email", "theEmail@gmail.com"}, {"Contact.FirstName", "theFirstName"}, {"Contact.LastName", "theLastName"}, {"User....
1
vote
1answer
706 views

Disallow Single Sign On for Specified Profile?

From Salesforce documentation: Do not enable Single Sign-On for the system administrator’s profile. If your system administrators were Single Sign-On users and your Single Sign-On server had an ...
1
vote
1answer
936 views

Create a new Self Signed Certificate

In our Org we have setup SSO with ADFS 2.0, we are using a Self-Signed Certificate which is about to expire in a couple of days. In Certificate and key Management section I got an option to create a ...
1
vote
2answers
64 views

Using a different Profile between SSO connected orgs

I have a question about multiple connected Salesforce orgs via SSO. Is there a way to change the profile access for a user between multiple connected orgs through SSO? I have a scenario where Org1 is ...
1
vote
1answer
1k views

Connecting Salesforce with asp.net app using salesforce credentials

I have an external .net mvc5 app and we want a way to use that app from salesforce. I can create a webtab to open that application. But this would mean i would need to ask users to login into asp.net ...
1
vote
1answer
144 views

Salesforce Federated single sign on with AD

I need to know there is a mechanism if the AD is down and when user login to salesforce with only sso (When mydomain settings, selected only single sign on) , what is the way to log in. Thanks, ...
1
vote
1answer
1k views

SSO with OAuth for Communities

Is it possible in Salesforce to provide a link on VF in the Customer portal so that once the portal user logged in and clicks on that link they should be redirected to the Community Home Page?
1
vote
1answer
163 views

What are the Mobile Considerations for IdentityConnect

I'd like to implement IdentityConnect to sync the ActiveDirectory users in our network to our Salesforce users. Are there any mobile considerations I should be aware of?
1
vote
1answer
883 views

SAML SSO With .NET - What is this error from Salesforce?

I am trying to use MVC.NET as an SSO IdP I cannot understand the reason of the error message I get. The result I get from salesforce says: Validating the Signature Is the response signed?...
1
vote
1answer
470 views

SSO with Salesforce as an IdP going to ADFS 2.0

I was wondering if it possible to use Salesforce as the IdP to login to Sharepoint or other Microsoft Applications using ADFS 2.0?
1
vote
1answer
3k views

Using Federated SSO, can we force users to login through SSO only? If we do, can admins still login from the salesforce login page? [duplicate]

We need to set up Federated SSO and make sure that users can't login using the standard login page (login.salesforce.com). One way that I know of doing this is, set up mydomain and force users to ...
1
vote
1answer
1k views

User getting redirected to home page on Single sign on

We are implementing SSO in our Org. This works fine. However, we have set an email alert which notifies user when a record of a certain object is created. In this email alert, we provide the user with ...
1
vote
2answers
997 views

Sandbox settings in Single sign on org

I created a new sandbox for my org. I am trying to activate a developer sandbox and I am struck there. All I see is a refresh link and login link. I am unable to see the activation link. I have ...
1
vote
1answer
47 views

SSO SAML + Embedded Login

I'm not finding useful documentation for this scenario Salesforce is set as IDP (identity provider) There are some SP (Service providers, web app) Is implemented a SSO using SAML Is asked to ...
1
vote
1answer
44 views

How to pass relaystate parameter from salesforce community to Azure

I am enabling SAML2.0 Authentication for Salesforce community users. During Authentication I want to pass Relay state parameter dynamically to Azure(IDP) so that users can navigate to a different ...
1
vote
0answers
34 views

Salesforce SAML Assertion flow via REST API for Lightning Out

Context: We want to log a user into a Lightning Out App hosted on an Azure AD System using the SAML Assertion flow. What we have establisched so far: We have a functioning connection for our ...

1 3 4 5 6 7 9