Skip to main content
We are planning on using Single Sign On and we want to prevent some users from logging into Salesforce using login.salesforce.com. I know that we have the setting to "Prevent login from login.salesforce.com", but we want to do this for a subset of users, not all. Is this possible?

 

Is there some type of permission that i can assign to certain users/profiles to allow them to login using login.salesforce.com?
12 个回答
  1. 2016年6月6日 20:03
    If you are using Federated Authentication, which it sounds like you are, then no, you cannot do this for a subset of users. If you are using Delegated Authentication, you can control this in the profile.

     

    We ran in to the same issue when we implemented SSO with Federated Authentication. Really you have to think of this more as a convenience feature to your users rather than a security feature. Your users are now able to log in with SSO if they want to.
0/9000