# Salesforce Integration

**Steps in Skillmine Authenticator**

* Create the client with basic information like client\_name, client\_type, scopes, redirect\_url and logout url.
* After client creation go to the advance settings of this client and enabled the SAML and save the settings.
* Now the IDP metadata is generated, click the view SAML button.It will redirect into the metadata. Save this metadata with xml extension.
* Map this client in any one of the flow settings.

**Steps in Salesforce**

1. Log in to Salesforce.
2. Navigate to **Setup** **-> SETTINGS -> Identity ->Single-Sign-On Settings.**
3. Enable SAML by clicking the Edit button, then checking the box for SAML Enabled and clicking the Save button.
4. Click the New button to create a new SAML Single Sign-On Setting.
5. Enter the following settings: (If we create the config via metadata it will most of the information automatically)

<figure><img src="https://1757876898-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNHJr75kSc6HL16U7k3F6%2Fuploads%2F8zXRN9HmcyQjfdPThkLD%2Fimage.png?alt=media&#x26;token=39a81670-20fe-49d4-8995-fb26f9ce1f67" alt=""><figcaption></figcaption></figure>

**Other settings**

* Request Signing Certificate: Generate self-signed certificate
* Request Signature Method: RSA-SHA256
* Assertion Decryption Certificate: Leave default
* SAML Identity Type:
  * Assertion contains the User's Salesforce username: Authenticator will send by default the unique id (email) of the user as NameIdentifier (the default) and Salesforce will match that with the Username field.
* SAML Identity Location: Identity is in the NameIdentifier element of the Subject statement
* Server Provided Initiated Request Binding: HTTP POST
* Custom Error URL: Leave default
* Single Logout Enabled: Enable this to set the Identity Provider Single Logout URL.
* API Name: Leave default
* User Provisioning Enabled: If checked, users will be just-in-time provisioned the first time they log in.
* After saving the configuration, download the metadata from the below screen.

<figure><img src="https://1757876898-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNHJr75kSc6HL16U7k3F6%2Fuploads%2FO1auofBAvXwCOIRG6J4n%2Fsalesforce_sp_metadata.png?alt=media&#x26;token=6297c260-15da-42c2-b5af-84f3f9685f61" alt=""><figcaption></figcaption></figure>

If you have issues while logging in, you can use the SAML Assertion Validator tool. You will find it on Salesforce Single Sign-On settings page.