Cbox ID
Salesforce
Salesforce
Single sign-on (SAML 2.0)
In the portal, choose Salesforce under Enterprise SSO and Start with Salesforce. Then, in Salesforce:
- From Setup, enter Identity Provider in the Quick Find box, click Enable Identity Provider, choose a certificate and save.
- From App Manager, create a New External Client App with a Local distribution state.
- In Web App (Enable SAML Settings), select Enable SAML and enter the Entity ID and ACS URL below.
- Set Subject Type (for example Username) and the Name ID Format to the email address format, and save.
- Give users access through profiles or permission sets, then on the Identity Provider page click Download Metadata.
The values the portal shows
| Salesforce field | Value |
|---|---|
| Entity ID (Web App (Enable SAML Settings)) | The portal's entity ID (https://…/sso/saml/…) |
| ACS URL (Web App (Enable SAML Settings)) | The portal's ACS URL (https://…/sso/saml/…/acs) |
| Name ID Format (Web App (Enable SAML Settings)) | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress |
What to bring back
Copy Download Metadata — the URL, or the XML — and paste it into the portal's Metadata URL or XML. Prefer the URL.
The assertion must be signed, and must carry the person's email address as an attribute or as a NameID in the emailAddress format. See Any SAML 2.0 provider for the details.
Salesforce's own guide: https://help.salesforce.com/s/articleView?id=xcloud.configure_external_client_app_saml.htm&type=5.
Then verify your domain and turn single sign-on on in the portal: Enterprise SSO.
Related
- Identity provider guides — every provider the portal guides you through.
- Enterprise SSO — the portal's five steps.