Skip to main content
15 votes
Accepted

remove advertising on login page of Salesforce

If you have SSO then I assume you have My Domain enabled. In the My Domain setup you can set the right frame URL, if it's blank it loads the ad from Salesforce. I would point it to some internal page ...
Dan Wooding's user avatar
  • 3,611
14 votes
Accepted

Enable SSO for Salesforce Marketing Cloud

We don't have a very helpful documentation on enabling Marketing Cloud SSO. We do have some really useful information on the background of the process but once we start the implementation, there are ...
Krati Garg's user avatar
10 votes
Accepted

Dynamically adding custom attributes to SAML response

Looks like you pretty much have covered all the steps an admin can perform to configure salesforce as an Identity provider. He can update the custom attributes to be sent back as part of assertion, ...
Salesforcesmarty's user avatar
8 votes
Accepted

How Do You Enable SAML IdP in a Partner Community?

The process is very much similar to how you set up for Internal Users except that you need to replace with Community URLS . Lets look at step by step the mechanism to accomplish the same .For ...
Mohith Shrivastava's user avatar
8 votes
Accepted

My Org SSO refers me to home page, no deep linking

The most comprehensive documentation is going to be the Single Sign On Implementation Guide. From your description it sounds like your IdP is not passing the RelayState parameter back through ...
Mark Pond's user avatar
  • 23k
7 votes
Accepted

What is the difference between 2048 and 4096 key size?

Many services do not support 4096-bit keys. A web search came across So you're making an RSA key for an SSL certificate. What key size do you use?, where the author explains the primary differences ...
sfdcfox's user avatar
  • 497k
7 votes

How to authenticate Data Loader with Single Sign On?

The answer saying it does not work is now outdated. You can use single sign-on with Data Loader since version 36 if you have a custom domain (xyz.my.saleforce.com). On the log in screen, choose ...
georg w.'s user avatar
  • 1,234
7 votes
Accepted

What is the difference between delegated authentication and single sign-on (SSO)?

With Delegated Authentication, the user logs in through the normal Salesforce login page, but Salesforce checks with a third-party server for the password. In this case, the user literally has no ...
sfdcfox's user avatar
  • 497k
6 votes
Accepted

Difference between Authentication and Identity Provider

Short answer is yes. Salesforce can be Authentication Provider and Identity Provider at same time. The main difference between Authentication Provider and Identity provider is - Identity Provider :...
Tushar Sharma's user avatar
6 votes
Accepted

Single Sign-On for Marketing Cloud

You will manage the roles in MC. Users still need to be created in Marketing Cloud, and have roles and business units assigned. The advantage of SSO is, that they would not need to provide MC ...
Lukas Lunow's user avatar
  • 21.7k
6 votes

Salesforce SSO with multiple identity providers

Yes. You can configure multiple Identity Providers in the same Org and let Users choose which IdP to use when they login. There is no restriction to be able to configure multiple IdPs in an Org. I ...
Jayant Das's user avatar
  • 30.6k
6 votes
Accepted

What is "Request Signing Certificate" used for?

As per Salesforce documentation: Request Signing Certificate: The certificate used to generate the signature on a SAML request to the identity provider. This signing certificate is used when ...
Shamina's user avatar
  • 4,295
5 votes

Cannot delete Single Sign-on Settings

If you are unable to delete SAML Single Sign-On Settings in Salesforce, check the below before deleting it. Go to Domain Management --> My Domain. Check whether the SAML Settings is disabled in "...
Sahil Chaudhary's user avatar
5 votes
Accepted

Salesforce SSO appending user id to the user name

Looks like you have Subject Type in your Service Provider's SAML, configured as Username in Salesforce. If that's the case, then what you are experiencing is the expected behavior. From documentation: ...
Jayant Das's user avatar
  • 30.6k
5 votes
Accepted

How to setup Salesforce Identity Provider to work with Twilio Flex

To setup Salesforce Idenity Provider to work with Twilio Flex you need to complete these steps: Create an self-signed certificate Enable Salesforce Identity Provider Create Twilio Flex Connected App ...
Robs's user avatar
  • 9,396
4 votes

remove advertising on login page of Salesforce

If you are using chrome, you can make a chrome extension to do this. Firefox and I think Safari also allow you to make extensions. My extension widens the login inputs, but making the advertising div ...
Caspar Harmer's user avatar
4 votes

Single Sign on in sandbox

The Authentication Service section in My Domain shows up the SSO configurations only if SAML is enabled in your Org and that My Domain is deployed. Refer to the below excerpt from the documentation ...
Jayant Das's user avatar
  • 30.6k
4 votes
Accepted

Disable forgot password for SSO Users

You can always have admins login using direct URL even when the Prevent login from ... is enabled. The way to do so is to append a query parameter login in the login URL (example below) where admins ...
Jayant Das's user avatar
  • 30.6k
4 votes

Let external system modify Salesforce data on behalf of logged in user

oAuth was designed for this use case and SF supports many oAuth flows. If you want to avoid using a service account (aka integration user), then pick a flow where user has to authorize access. From ...
identigral's user avatar
  • 7,683
4 votes
Accepted

How to get the public key in form of JWS Key set

The JWKS is located based on a URL specified in OpenID Connect metadata. The discovery of OIDC metadata uses a special endpoint that Salesforce already provides out of the box and you won't be able to ...
identigral's user avatar
  • 7,683
4 votes
Accepted

Automate setup of an external identity provider via APIs

Taking the summary out of comments for everyone's benefit: the screens you reference are for implementation of a scenario where an external service/app is acting as a SAML identity provider, SF is a ...
identigral's user avatar
  • 7,683
4 votes

Authorize Apex Rest API call using an Azure token

In general, for oauth to work, the user needs to authorise salesforce to perform requests on their behalf. If you haven't done it already, I suggest you go through the documentation on the many ...
Pablo Gonzalez's user avatar
4 votes
Accepted

Redirecting to MyDomain URL

You can create a Site and add a redirect from a Site URL to a destination. The destination can be any relative or absolute URL, including a MyDomain URL. Out of the box, the hostname of the site ...
identigral's user avatar
  • 7,683
4 votes
Accepted

Access by same Community user to Two Communities

Each community represents its own security context. That is, community B doesn't automagically "trust" community A in terms of user logging in even if the same user is a member of both communities. To ...
identigral's user avatar
  • 7,683
4 votes

JIT provisioning for Person accounts

The limitation of Person Account with JIT is no more a limitation now. See below screenshot from login & registration page of experience cloud site.
Kamlesh Kumar's user avatar
4 votes

Access Restricted for API Only Users

Salesforce owned many similar access control method , included "Profile" , "Permission set" , "Permission set Group" , "Public Group" ... To escape from "...
HO LI Pin's user avatar
  • 141
4 votes
Accepted

Will Salesforce passwords still expire during SSO usage?

Yes, passwords expire. If the password is expired, SSO will still work normally. They will not be forced to change their password until they log in with their Salesforce password, as opposed to their ...
sfdcfox's user avatar
  • 497k
4 votes
Accepted

Will "Disable login with Salesforce credentials" lock-out Administrators as well?

It is recommended to allow system administrator users to login with both the authentication methods. To achieve this, kindly disable login policy 'Prevent login from https://login.salesforce.com' in ...
Vinay's user avatar
  • 3,528
4 votes
Accepted

Why doesn't SSO between my Digital Experience sites work?

There is a "Select login options to display on the login page" section in the Workspace → Administration → Login & Registration → Login Page Setup that once a "SAML Single Sign-On ...
Keith C's user avatar
  • 136k
3 votes
Accepted

Redirecting from Salesforce.com to Community without additional login for internal users

My initial comments were not correct. They only apply to communities that have not yet been deployed. See Navigate to Your Communities in Salesforce Help: You can easily switch between working in ...
crmprogdev's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible