Setup a Single Sign-On Feature for Salesforce Users📱

Introduction

 

The Salesforce Single sign-on feature can enable lots of features. For example, to spend less time to manage your login passwords, users can send out any reports and records link to others can easily access with a single click and manage all the sensitive information from one place.

 

Salesforce Single Sign-on SSO is configured with a Third-party identity provider that another name is called Inbound SSO. Now we are using the third-party identity provider “Axion Heroku web app”

 

By reading this article, you will learn about how to set up a single sign-on feature in Salesforce.

 

Prerequisites

• You need to sign up for a free Trailhead Account
• Sub-domain in your Salesforce account
• Basic knowledge in Salesforce

Step 1

 

Launch Trailhead playground or Developer Edition.

 

Step 2

 

Click the gear icon and then click Setup.

 

 

Step 3

 

You must create a new user in your salesforce playground. Refer to my previous article to create a new user in Salesforce.

 

Search for “Users” in the search box and then click “Users” from search suggestions.

 

 

Step 4

 

I am using a current login user. If you created a new user, follow these steps.

 

Click “Edit” near your user name.

 

 

Step 5

 

In the user details page, scroll down Enter your unique Federation id in that field under the single sign-on section and then click the save button.

 

Example: [email protected]

 

 

Step 6

 

Next, click the link to download the Identity provider certificate from Third-party providers.

 

http://axiomsso.herokuapp.com. Copy and paste URLs in another browser.

 

Step 7

 

After accessing that page, click the “SAML Identity Provider and Tester”.

 

Step 8

 

Under the “Configure” section click the “Download the Identity Provider Certificate” link to download that certificate and store it on your computer.

 

 

Step 9

 

After downloading, come to the Salesforce playground page. Search “Single” in the quick find search box and then click “Single Sign-on settings” from suggestions.

 

 

Step 10

 

In a single sign-on page, click the “Edit” button to enable the SSO settings in Salesforce.

 

 

Step 11

 

Enable the SAML checkbox and then click the “Save” button.

 

 

Step 12

 

After saving, click the “New” button to create an SSO.

 

 

Step 13

 

Give the name and issuer URL

 

Name: Axiom Test App

Issuer: http://axiomsso.herokuapp.com

 

 

Step 14

 

Upload the digital certificate file. It's downloaded from a third party provider.

 

 

Step 15

 

Select the Signing certificate, request signature method, assertion decryption certificate, SAML identity type, SAML identity location, request binding and entity ID, copy your sub-domain name as entity id. Click the save button.

 

 

Step 16

 

Our entity ID is created. Hold that page in your browser.

 

 

Step 17

 

Again, go to the Third-party identity provider web page. Click the “SAML identity provider and tester” link.

 

Step 18

 

Click the “generate a SAML Response” link under the “Generate” section.

 

Step 19

 

Enter the Federation ID and Issuer URL in that field.

 

Federation ID: [email protected]

Issuer URL: http://axiomsso.herokuapp.com

 

 

Step 20

 

Go to the Salesforce single sign-on page, Copy the entity ID.

 

 

Step 21

 

Paste that copied Entity Id in the Entity field.

 

 

Step 22

 

Again, go to Salesforce single sign-on page, copy that page URL from your browser’s URL box.

 

 

Step 23

 

Come back to the Third party web page and paste the URL in the “Recipient URL” box.

 

 

Step 24

 

If all processes are completed, click the “Request SAML Response” button.

 

 

Summary

 

Finally, our single sign-on response is getting from a third-party authenticator Successfully, and then clicking the Login button to use the Single sign-on feature.