In salesforce I deactivating the users who are not using their salesforce account for some time period(Ex 15 days). but whenever the deactivated user wants to login to their salesforce account it should allow the user to login without any issues. To login we are using SSO and direct Username and password method as well. So in SSO settings we are having the SAML Identity Type as UserName not FederationId. When I tried to use the SAMLJITHandler method is not allowing me to save and showing the error federation Id. So is it possible to achieve my requirement without using the FederationId If yes Please guide me or else what are all the steps I need to follow? currently we are using UserName as the SAML Identity Type Thanks in advance.
Hello @Sankaranarayanan N you can simply use the builtin deprovisioning from your Idp.
SAMLJITHandler is for just in time provisioning. However, you can SSO Log with your username as far as both your SSO Setting in Salesforce, and your IDP are configured this way.
Eric
