Hello Everyone! I have implemented SSO in my org with delegated authentication and the process is working for 99.7% of my users. However, I have a handful of users that cannot access Salesforce due to some generic error ("java.net.MalformedURLException"). It's weird because all users have the same setup (Federation ID), but the issue is persistent for these ( approx. 30) users only. Azure is the authenticator and is showing successful authentication in its login history just for Salesforce to display: "Single Sign-On Error. We can't log you in because of an issue with single sign-on. Contact your Salesforce admin for help." I've checked everything and verified the Federation ID I'm using is unique and matches the Active Directory record for each user. What can I do at this point? Any help is appreciated.
Hi Peter,
As it turned out, the issue was that one of the fields Azure was referring to when accepting Salesforce authentication calls was incorrectly configured. Our Security team set up the Salesforce configuration in Azure, and when they set up the data points, they were looking for an invalid value (attribute), which happens to be the value we are using as our Federation ID.
Once they updated the reference, Azure could read (and accept) the Salesforce-passed values and connection was authenticated without issue. It was all just a matter of making sure the attribute references were correct.
There were two helpful tools we used to diagnose the issue: SAML Chrome Panel (Google Chrome extension) - used to monitor and track the SAML call itself and SAML Assertion Validator in Salesforce SSO Settings. Both apps helped tremendously.
