#Identity & Access Management토론 중인 항목 0개

Hello everyone,

For those working on the Get Hands-on with Data Cloud trai

l in Trailhead, please make sure to follow these steps: 

1. Create a Data Cloud playground.
2. Complete all the tasks in the trail before the playground expires.
3. Once finished, you’ll complete the Data Cloud trail.
4. By following these steps, you should not encounter errors with the Identity Resolution Ruleset task module.

Hope this helps! Best of luck, and happy learning! 🔥🚀 

Hi Trailblazers,

I need to create a restriction rule to restrict records based on some criteria and restrict for particular profile but I'm unable to select the profile name in restriction rules

There is no option to select profile name instead they have an option to select ProfileId.

Anyone knows how to do with restriction rules with profile name? 

#Restriction Rules  #Identity & Access Management

Hi all,

I have a requirement where we are integrating Salesforce with an external system. It is a 1-way communication where SF will use their API to pull in the necessary data. For authorization purpose they are using oAuth 2.0 Client Credentials with certificate (Microsoft oAuth link). They have provided us with the following information

1. Client ID

2. Tenant ID

3. .pfx certificate

4. Token Endpoint

5. scope

6. app endpoint.

I have tried a couple of ways using named credentials, but not able to establish the connection.

I would highly appreciate any help here on how to achieve this using salesforce. 

Thank you,

Aiswarya

#Identity & Access Management #Salesforce Developer #Named Credentials #Integration #TrailblazerCommunity #Advanced Administrator

We have enforced SSO for our users. When a user authenticates with Salesforce using an external application such as workbench or a google sheet connector they login using the custom domain and Microsoft Azure SSO login button.

The login history suggests differently, and says they are logging in using 'login.salesforce.com'. For such a login I would expect to see our custom domain.

Here are the logins highlighted in green where I would expect to the login URL as the custom domain

Am i misunderstanding the login history?

#Security #Identity & Access Management #SSO

My single sign on shows two different expiration date.

When I checked the SAML Single Sign On settings page in setup, for the field 'Identity Provider Certificate', It shows the following value 'CN=Microsoft Azure Federated SSO Certificate

Expiration: 4 Jul 2026 13:10:37 GMT'

I then opened the certificate itself, present on the field Request Signing Certificate, it says that the expiration date is in 2024.

Which is the true expiration date?

I checked with my Identity Provider team, they said it is 2026, but want to double check why it is showing 2024 in SF.

#SSO  #SSO Setup  #Single Sing-on  #Security  #Identity & Access Management

As per new OAuth 2.0 Hybrid App flow, Salesforce returns necessary cookie names, session ids, and domain details in the response so that when app opens the web view it can directly use the session id set in the cookies and grant access to the Salesforce pages inside the App.

Reference :

https://help.salesforce.com/s/articleView?id=sf.remoteaccess_oauth_hybrid_app_flow_cookies.htm&type=5

However I was wondering whether we can set cookies on other domains than the "current" native app domain due to security reasons?

#OAuth 2.0 #Hybrid #Identity & Access Management

On Wednesday, Salesforce Architects of Jacksonville Florida had a great meeting at The Link in Nocatee.

Mahesh Somineni presented to a hybrid group about Salesforce Identity Flows.

It was a great session of theory mixed with practical Postman demos.

Watch the full YouTube video below. Check the resources Mahesh graciously shared in the video description.

Thanks to The Link, for providing the meeting space.

https://youtu.be/jqS0Wf8E_R4?si=BwAuOTLhc2Ndg_yE

#Technical Architect #Integration Architect #Identity & Access Management

Hi Architects, 

I am trying to implement Oauth 2.0 Asset Token Flow using Postman. But cannot understand how actually can I use Asset Token to create/update records in salesforce. Here is what is did, 

1. Got an Access token using Web Server Flow (Postman)
2. Created a unsigned JWT for Actor Token. 
3. Exchanged Actor Token & Access Token to Asset Token (Postman)
   1. In this step I was also able to create a new Asset (which actually registers an Asset based on documentation.)
4. But I cannot access any API using this Asset token. 

How to use the Asset Token?. Any code sample or use cases will be appreciated.

#Identity & Access Management #OAuth 2.0

Thanks in advance

Prosenjit Sarkar