Comments on: Implement SAML based Single Sign On (SSO) | Using Salesforce as Identity Provider (Idp) as well as Service Provider (SP)

By: Naman Jaiswal

Naman Jaiswal — Wed, 15 Mar 2023 13:32:12 +0000

What happens if a user is not present in the Service provider application but exists at the IDP(Salesforce) org ? Will the user get access to Service Provider application?

By: Sakshi

Sakshi — Tue, 22 Feb 2022 11:14:23 +0000

Hi Jitendra,

Thankyou for the great information.

I am currently using miniOrange SSO for our salesforce org. Is there any difference in your solution and miniOrange for identity and access management?

Both look very similar but they provide adaptive MFA as well. Can this solution provide it?

By: harish.k

harish.k — Tue, 24 Nov 2020 16:29:07 +0000

can we retrieve and deploy SSO using Ant

By: appsian

appsian — Wed, 21 Oct 2020 14:52:55 +0000

Sophisticated describe the information. The information is real true. I am happy to go through your page. Keep Writing…

By: robinkhera84

robinkhera84 — Tue, 21 Jul 2020 08:04:49 +0000

Nice article

By: Lokesh

Lokesh — Tue, 12 Nov 2019 12:32:30 +0000

Hello Jithendra,

One question regarding SSO.
When Salesforce as IDP we are clicking on APP to go to SP.
With the help of federation id user is identified and logged into SP.

Question : When we didn’t mention federation ID, means federation Id is blank then it is showing Insufficient Privileges.
The reason in the log is ‘Error: User does not have a Federation Identifier selected’.
How to prevent that ?

Thanks in advance

By: annappa

annappa — Thu, 04 Apr 2019 17:31:37 +0000

Reciving this error: exactly followed same steps: We can’t log you in. Check for an invalid assertion in the SAML Assertion Validator (available in Single Sign-On Settings) or check the login history for failed logins.

By: Prem

Prem — Mon, 26 Mar 2018 09:46:33 +0000

Hello Jithendra,

is it possibe to use Salesforce REST API with Single signon ? I have 2 application say App1 and Test.salesforce.com.

My test.salesofrce.com is SSO enabled and my app1 too.

User will be logged in to app1 using SSO and wants to get some data from test.salesforce.com rest api and with out getting any Login page to provide username and password.

Possible?

By: SSO + Integration between Salesforce Orgs – singhforce

SSO + Integration between Salesforce Orgs – singhforce — Sat, 03 Sep 2016 17:57:37 +0000

[…] is very good blog which explains steps-by-step about how Salesforce will be acting as both Identity Provider (IdP) and […]

By: Deep Singhal

Deep Singhal — Tue, 05 Apr 2016 15:40:00 +0000

Hi Jitendra,

I am trying to clarify my understanding and hence the following question:-

I understand we need to create Connected App in Identity Provider. While creating the same we have options to use – SAML or OAuth2.0. Since you used SAML you have to specify SAML setting under Single Sign-on in Service Provider. Had we used Oauth2.0 in connected App and created an Auth Provider in Service Provider org, what would have been the difference?

Also please suggest when to use SAML and when OAuth2.0 .

Thanks..

Deep Singhal