Configuring Single Sign-On for Salesforce

Solution:

Salesforce is considered a behemoth when it comes to cloud apps that help you boost your sales. Most companies worldwide depend on Salesforce CRM to manage all their customers' and partners' information from a single console. Wouldn't it be great if your sales team could have a hassle-free login experience to all the business critical apps in the Salesforce software suite? ADSelfService Plus' single sign-on (SSO) feature does exactly that.

Once you’ve configured SSO for Salesforce in ADSelfService Plus, end users can easily access all their Salesforce apps with just their Active Directory or Windows credentials. Here are the steps to configure SSO for Salesforce.

Prerequisites

1. Make sure the ADSelfService Plus server can be accessed through an HTTPS connection (Access URL must be configured as HTTPS). For detailed steps, click here.
2. Log in to ADSelfService Plus as an administrator.
3. Navigate to Configuration → Self-Service → Password Sync/ Single Sign On → Add Application, and select Salesforce from the applications displayed.

   

   Note: You can also find the Salesforce application you need from the search bar located in the left pane, or the navigation option in the right pane.
4. Click IdP details in the top-right corner of the screen.
5. In the pop-up that appears, download the SSO certificate by clicking Download Metadata.

   

Salesforce configuration steps

1. Log in to Salesforce with administrator credentials.
   Note: The steps below reference Salesforce Lightning.
2. Click the Gear icon in the top-right corner.

   

3. Navigate to Setup → Settings (from the left panel menu) → Identity → Single Sign-On Settings.
4. Click Edit.
5. Select SAML Enabled and click Save.

   

6. Click New from Metadata File under SAML Single Sign-On Settings.
7. Upload the metadata file downloaded in Step 5 of Prerequisites, then click Create.

   

8. Modify the Name and API Name with valid names for reference.
9. Click Save.

   

10. Copy the Login URL, which will be your SAML Redirect URL when configuring ADSelfService Plus.
11. To map SSO login to a particular domain login page:
    • Navigate to Settings (from the left panel menu) > Company Settings > My Domain.
    • Click Edit in the Edit Authentication Configuration of the required domain.
    • Select SSO configuration under Authentication Service.
    • Click Save.

ADSelfService Plus configuration steps:

1. Now switch to ADSelfService Plus’ Salesforce configuration page.
2. Enter the Application Name and Description.
3. Enter the Domain Name of your Salesforce account. For example, if you use johndoe@thinktodaytech.com to log in to Salesforce, then thinktodaytech.com is the domain name.
4. Under the Assign Policies field, select the policies for which SSO needs to be enabled.
   Note: ADSelfService Plus allows you to create OU- and group-based policies for your AD domains. To create a policy, go to Configuration → Self-Service → Policy Configuration → Add New Policy.
5. Select Enable Single Sign-On.
6. For the SAML Redirect URL field, enter the Login URL you saved in Step 10 of Salesforce configuration steps.
7. Click Add Application.

   

   Your users can now sign in to Salesforce through ADSelfService Plus.

ADSelfService Plus also allows users to access their Salesforce accounts from its web console with just a click.