#SSO Identity Provider0 discutindo

Hi Community, 

I have an external portal hosted outside Salesforce that our partners (Salesforce portal users) need to access. I’ve set up an Experience Cloud portal and set up SSo with Salesforce as the Identity Provider. The community site is blank, it is only there to handle user creation and password setup. The external site uses REST APIs to fetch Salesforce data for the logged‑in user.

When a new user is created, they receive a “Set Password” link and, after setting their password, are redirected to the community home page which is blank. Is there a way to send them straight to the external portal after they log in? without asking them to enter their credentials again? 

Thanks, 

 Youness 

Hello, 

We use Sailpoint IIQ as out entitlement management/ User Provisioning system which uses the UID from Salesforce to manage entitlement for the user.  I was building out roles in Sailpoint (they act sort of like Permission Set Groups) and I noticed that after a SSO cert was renewed for an org, My mapping for profiles was invalid in Sailpoint.  

I am trying to determine if this was somehow an oversight on my part (completely possible) or if when an SSO cert is updated, if that changes the UID for the profiles on the org.  

#SSO Identity Provider  #Connected Apps Help  #Automation

I have done authentication and also done editing in Apex Class as it is mentioned in trailhead module (Identity for Customer) but still getting this error.

#SSO Identity Provider #Trailhead

We are looking to enable MFA and we are also currently using SSO with our System Admins having User Names/Passwords to get in if SSO goes down.  If we enable the 'Disable Login with Salesforce Credentials' feature in Salesforce how will System Admins log into the system?

I have turned this on and I'm unable to login without SSO.  I've heard in a Support Case that I can append something to the end of my Domains URL but that didn't work.  I've also read into Delegated Authentication but I find it strange we have to set a separate Web Service for this and that Salesforce doesn't just have an exclusion list like many others do.

Any help would be appreciated, thank you!

#Sales Cloud #SSO Identity Provider #SingleSignOn #Salesforce Admin

When performing MFA through an SSO identity provider, some configurations allow MFA to be bypassed when the login originates from a trusted network and device; in all other case, MFA is required. 

Do such "hybrid" SSO-MFA configurations meet the Salesforce MFA requirement, or does Salesforce require an "MFA always" configuration?

We perform MFA through our SSO identity provider.  What exactly does my security department need to check or do to confirm we are Salesforce MFA-ready?  Is there a testing tool or "compatibility-check page" that we can go to to confirm our SSO implementation will pass the requirements?