Salesforce SSO
Updated 2 years ago
by
admin
- Ensure that you have a Salesforce account that allows access to the Single Sign On feature
- Ensure that you have an Identity Provider configured
- Navigate to App Launcher -> Add Apps
- Select the Salesforce tile and optionally enter a name to display to IDaaS users
- Select an existing category or create a new category by using the Manage option. The Salesforce app tile will appear in this category for IDaaS users
- Log in to Salesforce as an Administrator and click the settings cog icon and click Setup
- In the Search field at the top, type domain and select Domains -> Sites and Domains
- Copy the domain name that is configured into the Application URL field, making sure to add https:// at the start
- Select the preferred Identity Provider for this app
- Click Next
- Click Download Metadata button and save the file on your computer
- Within Salesforce setup, navigate to Identity -> Single Sign-On Settings and click New from Metadata File
- Click Choose File and select the XML file downloaded in Step 11
Remember, in this case, the IDaaS product is acting as a broker between the app and your configured Identity Provider. Therefore, the IDaaS service is the IdP.
- Click Create
- Click Save
- From the list of SAML settings, click the new entry e.g. acme and then click Download Metadata
- Return to the Add Application wizard and click Next. When prompted, click Upload Metadata and then select the XML file downloaded from the previous step
- Click Next to complete the wizard
- Back in Salesforce, search for Domains and select Sites and Domains and click the configured domain. Scroll down to Authentication Settings and click Edit
- Ensure that the newly added SAML name is ticked e.g. acme and click Save
- Click OK and then Next to finalise the configuration.
- Test the authentication by clicking the newly created Salesforce tile and when prompted, select the acme SAML login option
Further Reading
- Salesforce documentation (external)