Shibboleth and Salesforce

[WULMS Alex]

Hi,

Salesforce supports two different SSO mechanisms. Their proprietary "delegated SSO" mechanism and SAML.

When you enable "SSO"  in the settings screen, you enable the proprietary one.

In order to enable SAML on the other hand, you simply have to configure the SAML parameters in the SAML settings screen and tick the "SAML enabled" check-box. I understand that you have already done that, given the fact that you have the IdP initiated (unsolicited) SAML SSO working.

I assume that your next step is that you want to get the SP-initiated SSO working. For that, you must configure the "myDomain" feature on Salesforce and then access Salesforce through the configured "myDomain" URL. See the documentation on Salesforce for further details. Following web-page on Salesforce is a good starting point: http://login.salesforce.com/help/doc/en/sso_saml.htm.

Thanks and kind regards,
Alex




From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Juan Quintanilla
Sent: Monday, July 02, 2012 4:11 PM
To: users at shibboleth.net
Subject: Shibboleth and Salesforce

Hi,

We are trying to get salesforce to work with Shibboleth 2.3.6, we have gotten to the point where we can login to salesforce if we use the following link with our shibboleth IDP:

https://OURTESTIDP/idp/profile/SAML2/Unsolicited/SSO?providerId=https%3A%2F%2Fsaml.salesforce.com


The problem we are running into is that if we go to the login page for salesforce and configure it for SSO it fails on login. The error message we see on salesforce is  "the sso gateway you provided is invalid"

I remember reading in the list archives that someone had to create a jsp page on their IDP to accept the request and that would allow the user to login.

Has anyone been able to overcome this hurdle if so we would appreciate some assistance.

Thanks!
___________________
Juan Quintanilla
UTS - Enterprise Group
305-348-6573
jquin014 at fiu.edu<mailto:jquin014 at fiu.edu>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120709/0e663954/attachment.html