Setup a Single Sign-On Feature for Salesforce Users📱

Introduction

The Salesforce Single sign-on feature can enable lots of features. For example, to spend less time to manage your login passwords, users can send out any reports and records link to others can easily access with a single click and manage all the sensitive information from one place.

Salesforce Single Sign-on SSO is configured with a Third-party identity provider that another name is called Inbound SSO. Now we are using the third-party identity provider “Axion Heroku web app”

By reading this article, you will learn about how to set up a single sign-on feature in Salesforce.

Prerequisites

You need to sign up for a free Trailhead Account
Sub-domain in your Salesforce account
Basic knowledge in Salesforce

Step 1

Launch Trailhead playground or Developer Edition.

Step 2

Click the gear icon and then click Setup.

Setup Single Sign-On Feature For Salesforce Users

Step 3

You must create a new user in your salesforce playground. Refer to my previous article to create a new user in Salesforce.

Search for “Users” in the search box and then click “Users” from search suggestions.

Step 4

I am using a current login user. If you created a new user, follow these steps.

Click “Edit” near your user name.

Step 5

In the user details page, scroll down Enter your unique Federation id in that field under the single sign-on section and then click the save button.

Example: [email protected]

Step 6

Next, click the link to download the Identity provider certificate from Third-party providers.

http://axiomsso.herokuapp.com. Copy and paste URLs in another browser.

Step 7

After accessing that page, click the “SAML Identity Provider and Tester”.

Step 8

Under the “Configure” section click the “Download the Identity Provider Certificate” link to download that certificate and store it on your computer.

Step 9

After downloading, come to the Salesforce playground page. Search “Single” in the quick find search box and then click “Single Sign-on settings” from suggestions.

Step 10

In a single sign-on page, click the “Edit” button to enable the SSO settings in Salesforce.

Step 11

Enable the SAML checkbox and then click the “Save” button.

Step 12

After saving, click the “New” button to create an SSO.

Step 13

Give the name and issuer URL

Name: Axiom Test App

Issuer: http://axiomsso.herokuapp.com

Step 14

Upload the digital certificate file. It's downloaded from a third party provider.

Step 15

Select the Signing certificate, request signature method, assertion decryption certificate, SAML identity type, SAML identity location, request binding and entity ID, copy your sub-domain name as entity id. Click the save button.

Step 16

Our entity ID is created. Hold that page in your browser.

Step 17

Again, go to the Third-party identity provider web page. Click the “SAML identity provider and tester” link.

Step 18

Click the “generate a SAML Response” link under the “Generate” section.

Step 19

Enter the Federation ID and Issuer URL in that field.

Federation ID: [email protected]

Issuer URL: http://axiomsso.herokuapp.com

Step 20

Go to the Salesforce single sign-on page, Copy the entity ID.

Step 21

Paste that copied Entity Id in the Entity field.

Step 22

Again, go to Salesforce single sign-on page, copy that page URL from your browser’s URL box.

Step 23

Come back to the Third party web page and paste the URL in the “Recipient URL” box.

Step 24

If all processes are completed, click the “Request SAML Response” button.

Summary

Finally, our single sign-on response is getting from a third-party authenticator Successfully, and then clicking the Login button to use the Single sign-on feature.