Hello -
I've implemented SSO that uses Shibboleth as the identity provider. At NC State we have Unity IDs with corresponding unity email addresses. I'm passing our NC State Unity ID email addresses through the Federation ID field on the User object.
I also have partners that login to our system that don't have Unity IDs or Unity email addresses and need to go through a login that doesn't route through Shib.
My question is regarding the URL that I'm using for the login page. I want one page with both options. 1 for the the SSO/Unity ID and 1 for the Salesforce username and PW. Does anyone know what this might be?
I've been using https://ies--mfa.my.salesforce.com/?login but it's inconsistent. I've read that the
?login is a temporary fix and shouldn't be used long term. Which is in line with my experience.
Attached is a screenshot of what I get when I go to the address above. This is displaying as I want it to, but I need a more stable URL.
Thanks in advance for any input.
Michelle
Hi Michelle, the change to url query strings has already been activated in Winter'22 (see this release note: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_disable_login_credentials_in_query_string.htm&type=5&release=234)
Of course, this is not to say that things won't change in future...
When I visit https://ies--mfa.my.salesforce.com/?login I get exactly the same results as when I visit https://ies--mfa.my.salesforce.com/ so I'm not sure what differences you are seeing.
