Skillmine Auth - Documentation
  • Introduction
  • Get started
    • Create and integrate the first application
    • Customize sign-in experience
    • Enable social sign-in
    • Configuring the SSO (Single Sign On):
  • Protect your API
    • Protect your API on Node(Express)
    • Protect your API on Python
    • Protect your API on Spring Boot
  • Manage users
    • Manage users using Admin Console
    • Manage users using Management API
  • Auth Architecture
  • SSO Dashboard
  • SSO Application
  • Blueprints
  • Groups & Permissions
    • User Roles
    • Permissions
    • Group Category
    • Group
  • Workflow
    • Workflow
    • Manage Request
  • Settings
    • Authentication Methods
    • Schemas
    • Consent Management
    • Password Policy
    • CAPTCHA's
    • Site Group
    • Messaging Template
      • Built-In Template
      • Custom Template
    • Webhook Settings
    • Connectors
    • Device Restriction
    • MFA
      • End User Configuration Guide
      • End User Usage
    • MFA Settings
    • Payment Gateway
      • Providers
      • Payment Flows
      • Payment History
    • Open Id Connect Setttings
      • Client Settings
      • Scopes
    • SCIM
  • You don't need a user table
  • Localization
  • API Resource
  • Users
    • Search Users
    • Invite User
    • Create User
    • Bulk User Operations
      • Creation
      • Updation
      • Deletion
      • Reset Password
  • Report
    • User Report
    • Captcha Failure Report
    • Inactive users report
    • Provider wise Report
    • Webhook Report
    • Notification Report
    • Audit Trail Report
    • Mac Restriction Report
    • RADIUS Audit Trail Report
  • Social identities
  • References
    • OpenID Connect
  • Usecases
    • ECommerce Site Integration
    • Groups & Roles Integration
    • Custom Provider Integration
    • Salesforce Integration
    • Desktop SSO Integration
  • Connectors
    • Office365
Powered by GitBook
On this page
  1. Usecases

Salesforce Integration

PreviousCustom Provider IntegrationNextDesktop SSO Integration

Last updated 1 year ago

Steps in Skillmine Authenticator

  • Create the client with basic information like client_name, client_type, scopes, redirect_url and logout url.

  • After client creation go to the advance settings of this client and enabled the SAML and save the settings.

  • Now the IDP metadata is generated, click the view SAML button.It will redirect into the metadata. Save this metadata with xml extension.

  • Map this client in any one of the flow settings.

Steps in Salesforce

  1. Log in to Salesforce.

  2. Navigate to Setup -> SETTINGS -> Identity ->Single-Sign-On Settings.

  3. Enable SAML by clicking the Edit button, then checking the box for SAML Enabled and clicking the Save button.

  4. Click the New button to create a new SAML Single Sign-On Setting.

  5. Enter the following settings: (If we create the config via metadata it will most of the information automatically)

Other settings

  • Request Signing Certificate: Generate self-signed certificate

  • Request Signature Method: RSA-SHA256

  • Assertion Decryption Certificate: Leave default

  • SAML Identity Type:

    • Assertion contains the User's Salesforce username: Authenticator will send by default the unique id (email) of the user as NameIdentifier (the default) and Salesforce will match that with the Username field.

  • SAML Identity Location: Identity is in the NameIdentifier element of the Subject statement

  • Server Provided Initiated Request Binding: HTTP POST

  • Custom Error URL: Leave default

  • Single Logout Enabled: Enable this to set the Identity Provider Single Logout URL.

  • API Name: Leave default

  • User Provisioning Enabled: If checked, users will be just-in-time provisioned the first time they log in.

  • After saving the configuration, download the metadata from the below screen.

If you have issues while logging in, you can use the SAML Assertion Validator tool. You will find it on Salesforce Single Sign-On settings page.