# Salesforce Integration

**Steps in Skillmine Authenticator**

* Create the client with basic information like client\_name, client\_type, scopes, redirect\_url and logout url.
* After client creation go to the advance settings of this client and enabled the SAML and save the settings.
* Now the IDP metadata is generated, click the view SAML button.It will redirect into the metadata. Save this metadata with xml extension.
* Map this client in any one of the flow settings.

**Steps in Salesforce**

1. Log in to Salesforce.
2. Navigate to **Setup** **-> SETTINGS -> Identity ->Single-Sign-On Settings.**
3. Enable SAML by clicking the Edit button, then checking the box for SAML Enabled and clicking the Save button.
4. Click the New button to create a new SAML Single Sign-On Setting.
5. Enter the following settings: (If we create the config via metadata it will most of the information automatically)

<figure><img src="/files/i7pEEsnVXoo7NC0CDhOg" alt=""><figcaption></figcaption></figure>

**Other settings**

* Request Signing Certificate: Generate self-signed certificate
* Request Signature Method: RSA-SHA256
* Assertion Decryption Certificate: Leave default
* SAML Identity Type:
  * Assertion contains the User's Salesforce username: Authenticator will send by default the unique id (email) of the user as NameIdentifier (the default) and Salesforce will match that with the Username field.
* SAML Identity Location: Identity is in the NameIdentifier element of the Subject statement
* Server Provided Initiated Request Binding: HTTP POST
* Custom Error URL: Leave default
* Single Logout Enabled: Enable this to set the Identity Provider Single Logout URL.
* API Name: Leave default
* User Provisioning Enabled: If checked, users will be just-in-time provisioned the first time they log in.
* After saving the configuration, download the metadata from the below screen.

<figure><img src="/files/GTyMTCqtiH2WWaEZIUwj" alt=""><figcaption></figcaption></figure>

If you have issues while logging in, you can use the SAML Assertion Validator tool. You will find it on Salesforce Single Sign-On settings page.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://authdocs.skill-mine.com/licentio-documentation/usecases/salesforce-integration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.