Overview

This guide details the necessary steps to establish SSO for Salesforce using BeanLogin.

The guide assumes that you already have an existing Salesforce subscription.

 

Create As Password-Vault App	Create As SAML App	User Provisioning Supported
Supported	Supported	Not Supported

SSO Configuration in BeanLogin

Below are the steps involved in configuration of Salesforce within BeanLogin.

1. Login to BeanLogin as an Administrator.
2. Navigate to Administration >> Access Management >> Corporate Apps.
3. Click New.
4. Select Sales Force from the list of apps and click it will give option whether to add as password-vault/SAML based on choice select the proper option and click on Add Selected Apps. It will add apps under corporate section with status as inactive.
5. Enter the domain name. Record the “Entity Id” value.
6. Select the BeanLogin groups to enable SSO access.

SSO Configuration in Salesforce

Pre-requisites

1. SSO for Salesforce is available for in Salesforce Classic and Lightning Experience.
2. My Domain must be set up in Salesforce.
3. The following user permissions are needed to be able to setup SSO.
   • View Setup and Configuration
   • Customize Application
   • Modify All Data

Enable SSO

1. Click the Settings icon in the top right corner of the page.
2. Click Setup.

3. Click Settings.
4. Click Identity.

5. Click Single Sign-on Settings.
6. Click ‘New from Metadata URL’

7. Enter https://portal.beanlogin.com/metadata/saml/idp.xml as the metadata URL.
8. Click Create.

9. Salesforce automatically pulls the SSO settings from the metadata url and creates the federation partnership between BeanLogin and Salesforce.
10. Once the partnership is created, click the Edit button to review the settings.
11. Edit the following SSO settings
    1. Issuer: urn:federation:beanlogin:https://[accountname].my.salesforce.com
    2. EntityID: https://[accountname].my.salesforce.com
12. Click Company Settings
13. Click My Domain

14. Ensure authentication service is set to urn:federation:beanlogin