Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [single-sign-on]

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

Filter by
Sorted by
Tagged with
1
vote
1answer
264 views

can 1 ADFS support multiple org?

Hi I have ADFS setup for 1 of my org and its working fine, now i would like to add another org to the same ADFS server, can it be done? As I got told that only 1 org can be setup in ADFS server as it ...
1
vote
1answer
530 views

Can we add one federation Id for multiple account names?

I have implement federated SSO in production instance. In our organization some of users have multiple salesforce accounts. Therefore I need to add one federationId for multiple user accounts? Is it ...
1
vote
1answer
260 views

SSO for Composite Apps using SAML or OAuth

We have a SaaS running on AWS that we want to integrate with Salesforce. In a first step we want to add a web tab to the Salesforce UI and have a single-sign-on with our application so that if ...
1
vote
1answer
176 views

Salesforce Single Sign on metadata file's binding method can't change in to http redirect

When I'm changing Service Provider Initiated Request Binding in to http redirect it's saving and displaying as http redirect. But when I looking in the metadata file it shows as below. Binding="urn:...
1
vote
1answer
652 views

Securing composite app single sign on with salesforce session Id

We currently have an integration with our external platform inside salesforce by using IFrames. For authentication we pass the Salesforce session as a query string parameter inside the IFrame address ...
1
vote
1answer
29 views

Why doesn't https://mydomain.my.salesforce.com/?login work when single signon is enabled?

The Best Practices and Tips for Implementing Single Sign-On states: System admins must always be able to log in to Salesforce, even if SSO is enabled for their accounts. For example, you need a ...
1
vote
1answer
101 views

Salesforce as identity provider - implementing Single Logout (django + pysaml2)

Related question: https://stackoverflow.com/questions/47293940/sp-initiated-single-logout-not-working-with-salesforce I'm implementing single-sign-on service using Salesforce as identity provider. My ...
1
vote
1answer
69 views

Just-in-Time Provisioning for Communities Mixed DML Error

We are trying to implement Just-in-Time Provisioning for Communities using custom handler class. There are 3 scenarios When Contact with the provided email (Federation ID) exist in salesforce and ...
1
vote
1answer
91 views

Can we use frontdoor.jsp to give access to salesforce vf page, without using username and password?

If the SSO is set up, can we use frontdoor.jsp without using Username password? I would like to access the second salesforce org from first salesforce org. SSO has been set up already. Canvas ...
1
vote
1answer
79 views

Consume external REST API user-aware (without having to re-login)

I have an Apex class that is consuming a partners REST webservices. Currently all users of my app (in the installed org) access the service via a single API Integration user. We now want make the ...
1
vote
2answers
275 views

Salesforce SSO - unique usernames needed between Sandbox and prod environment?

Our team is trying Salesforce and we have a sandbox and a production Salesforce. To use SSO (Okta) are we able to use same SSO login to both environments? Because email address to my knowledge has to ...
1
vote
1answer
187 views

Is Custom Domain required in SF when implementing SSO where SF is the Service Provider?

I think My Domain is only required when SF is the IdP of a SSO solution and not strictly required when SF is the Service Provider.
1
vote
1answer
201 views

Sales Force Marketing Cloud Entity ID

For the SSO setup for SFMC Exact Target, where to find the Entity id . Followed this document to create SSO meta data https://help.salesforce.com/articleView?id=mc_overview_create_salesforce_saml_key....
1
vote
1answer
2k views

Salesforce No_Oauth_State, State not valid

I'm using Open Id for Salesforce, I followed the Doc from https://help.salesforce.com/articleView?id=sso_provider_azure.htm and could able to login to Salesforce using Azure AD credentials ...
1
vote
1answer
190 views

Need Single Sign on related clarification

We have a custom portal in which there are links to some salesforce pages which are part of a customer community. Users have to be logged into the custom portal in order to access salesforce(custom ...
1
vote
2answers
594 views

How to exclude API users from Federated SSO

We have implemented Federated SSO for all our users with our Identity management and got stuck with few API users who interact with salesforce with API only, how can we exclude certain users from SSO ...
1
vote
1answer
88 views

Cannot see Pardot Activities in Salesforce Contact/Lead Record. Keeps getting prompted to enter Pardot credentials

I have set up Salesforce Connector in Pardot and and also have Pardot App in my Salesforce Org. I have set up Pardot Activites Vf Page in Contact and Lead. And every time it prompts me to enter the ...
1
vote
1answer
327 views

Is this possible to configure Single Sign On between Salesforce Sandbox and Marketing Cloud?

I am trying to configure Single Sign On between Salesforce Sandbox and Marketing Cloud Organization following this document. I receive error message Provided federation ID could not be found, or ...
1
vote
1answer
871 views

Single Sign-On Error when viewing Subscriber org in LMA

I am getting a Single Sign-On Error when attempting to view one specific Subscriber Organization in the LMA (License Management Application) The error message is: We can't log you in. Check for an ...
1
vote
1answer
41 views

Is there any possible way to create a Certificate with more than 2 years?

For single-sign-on authenticate, a certificate is being made but it has only 1 year of expiry. That's why the user is getting an email regarding expiry. Is there any other way out for automatic ...
1
vote
1answer
816 views

SP-initiated SAML Logout Request - is this supported?

I have Salesforce set up as an IdP, with a custom app acting as the SP. I have SP-initiated login via SAML implemented, following this guide. I'd like to enable SP-initiated logout as well, but I ...
1
vote
1answer
2k views

SAML SSO Just In Time Provisioning failing with no error information?

I've got SSO using SAML setup and working fine, and am trying now to get it so JIT provisioning is working as well, so users in my company can easily be created/updated in Salesforce automatically ...
1
vote
1answer
59 views

Can I login at login.salesforce.com when MyDomain SAML is broken?

I'm setting up Single Sign On using SAML 2 on Salesforce, and had it working fine, and am forcing users to login at the Identity Provider. But I made a mistake and changed my SAML to using "Just in ...
1
vote
1answer
139 views

Why can't I update a Community Users ProfileID during JIT provisioning via SAML SSO?

My Attributes: {"Contact.Account", "001230942830"}, {"Contact.Email", "theEmail@gmail.com"}, {"Contact.FirstName", "theFirstName"}, {"Contact.LastName", "theLastName"}, {"User....
1
vote
1answer
584 views

Disallow Single Sign On for Specified Profile?

From Salesforce documentation: Do not enable Single Sign-On for the system administrator’s profile. If your system administrators were Single Sign-On users and your Single Sign-On server had an ...
1
vote
1answer
922 views

Create a new Self Signed Certificate

In our Org we have setup SSO with ADFS 2.0, we are using a Self-Signed Certificate which is about to expire in a couple of days. In Certificate and key Management section I got an option to create a ...
1
vote
2answers
64 views

Using a different Profile between SSO connected orgs

I have a question about multiple connected Salesforce orgs via SSO. Is there a way to change the profile access for a user between multiple connected orgs through SSO? I have a scenario where Org1 is ...
1
vote
1answer
1k views

Connecting Salesforce with asp.net app using salesforce credentials

I have an external .net mvc5 app and we want a way to use that app from salesforce. I can create a webtab to open that application. But this would mean i would need to ask users to login into asp.net ...
1
vote
1answer
144 views

Salesforce Federated single sign on with AD

I need to know there is a mechanism if the AD is down and when user login to salesforce with only sso (When mydomain settings, selected only single sign on) , what is the way to log in. Thanks, ...
1
vote
1answer
1k views

SSO with OAuth for Communities

Is it possible in Salesforce to provide a link on VF in the Customer portal so that once the portal user logged in and clicks on that link they should be redirected to the Community Home Page?
1
vote
1answer
163 views

What are the Mobile Considerations for IdentityConnect

I'd like to implement IdentityConnect to sync the ActiveDirectory users in our network to our Salesforce users. Are there any mobile considerations I should be aware of?
1
vote
1answer
881 views

SAML SSO With .NET - What is this error from Salesforce?

I am trying to use MVC.NET as an SSO IdP I cannot understand the reason of the error message I get. The result I get from salesforce says: Validating the Signature Is the response signed?...
1
vote
1answer
470 views

SSO with Salesforce as an IdP going to ADFS 2.0

I was wondering if it possible to use Salesforce as the IdP to login to Sharepoint or other Microsoft Applications using ADFS 2.0?
1
vote
1answer
3k views

Using Federated SSO, can we force users to login through SSO only? If we do, can admins still login from the salesforce login page? [duplicate]

We need to set up Federated SSO and make sure that users can't login using the standard login page (login.salesforce.com). One way that I know of doing this is, set up mydomain and force users to ...
1
vote
1answer
1k views

User getting redirected to home page on Single sign on

We are implementing SSO in our Org. This works fine. However, we have set an email alert which notifies user when a record of a certain object is created. In this email alert, we provide the user with ...
1
vote
2answers
986 views

Sandbox settings in Single sign on org

I created a new sandbox for my org. I am trying to activate a developer sandbox and I am struck there. All I see is a refresh link and login link. I am unable to see the activation link. I have ...
1
vote
1answer
38 views

SSO with Salesforce and Azure AD - disable single logout

I've started playing with Salesforce and configuring SSO to work with our sandboxes. So far so good, and logins can happen without issue. However, I'm running into a bit of an issue when a user logs ...
1
vote
1answer
64 views

How to get the public key in form of JWS Key set

I have a JWT Class which generates JWT Token using Private key. Now, I need to expose an endpoint for exernal application to get the public key in the form of JWKS KeySet. Can anyone guide me how to ...
1
vote
1answer
116 views

Need help on Salesforce Login Discovery using My domain

requirement- When user enter username then it will redirect to SSO setup in salesforce and if user entered correct details then second sso needs to get called and if user enter correct credentials ...
1
vote
1answer
38 views

Can we remove the ability to login using a username for community members, and only include the ability to login using KP Single Sign-on?

Can we remove the ability to login using a username for community members, and only include the ability to login using KP Single Sign-on?
1
vote
1answer
209 views

Deployment to Scratch Org failing

I've one single sign on setting which need to be deployed every time upon scratch org creation. SSO has a JITHandler with it which is part of source and deployed to scratch org. I know that SSO ...
1
vote
1answer
53 views

How to get data from one Service Provider to another Service Provider using the obtained SAML assertion?

I have 3 Salesforce orgs (IDP, SP1 and SP2) and have set up SSO where IDP is my Identity-Provider and SP1 and SP2 are 2 Service-Providers. Using SP1-initiated SSO login, the user gets authenticated in ...
1
vote
0answers
104 views

Error: Invalid HTTP method in community SSO

Have set up my community SSO by referring Configure SSO Across Multiple Salesforce Orgs. After that when I try to login I am getting below error. Error: Invalid HTTP method I tried to have set up ...
1
vote
1answer
271 views

Single Sign-On Marketing Cloud with ADFS as Identity Provider [closed]

Recently, I have configured SSO with ADFS for the Service Cloud and now I am trying to achieve the same thing for the Marketing Cloud. However, I do not want Salesforce Service Cloud as Identity ...
1
vote
1answer
81 views

Single Sign On Marketing cloud via Ws02

We are trying to enable SSO for our Marketing cloud users. We are enabling sso via WS02 and not using Service cloud as the Idp. in MC, We have created the key and enabled SSO for users. Marketing ...
1
vote
1answer
367 views

SSO for an existing Community User with JIT fails if Contact Email address is updated

While I am still trying to figure if this is a Salesforce bug or an issue with the documentation itself, or if I am missing something here, thought of getting some opinion here as well, if anyone has ...
1
vote
0answers
238 views

Missing unique Third party identifier

I am trying to configure Salesforce to use my custom Identity provider(Based on Identity server 3) as oAuth Provider similar to Google. I am able to successfully achieve it but facing one issue with ...
1
vote
1answer
545 views

Setup SSO Salesforce Commerce Cloud

I just wanted to know if it is possible to setup SSO for Salesforce Commerce Cloud (Demandware) using Okta? Is it some thing OOB feature of Salesforce Commerce Cloud (Demandware) or need to do some ...
1
vote
1answer
312 views

Salesforce (as IdP) returns error response to every SAML Single Logout request

I'm having trouble getting Salesforce SAML single logout (SLO) working. I'm writing a web application that uses Salesforce as the SAML Identitiy Provider (IdP) Every LogoutRequest I send gets a ...
1
vote
0answers
137 views

Can Salesforce be configured as both Identity Provider and Service Provider at the same time

I want to configure salesforce as both Sp and Idp so that user can have a seamless interaction with an external application. Does Salesforce support this?