Did you know - How to configure Single Sign-On in ADSelfService Plus? (Part 4 - Salesforce)

Salesforce is considered to be a behemoth when it comes to cloud apps which help you boost your sales. Most companies, worldwide, depend on their marquee product Salesforce CRM to manage all their customers, partners, and prospects information from a single console. Wouldn't it be great if your sales team could have a hassle-free login experience to all the business critical apps in Salesforce software suite? The ADSelfService Plus' single sign-on(SSO) feature does exactly that.

Upon configuring SSO in ADSelfService Plus for Salesforce, end users could easily access all their salesforce apps with just their Active Directory or Windows credentials. This week let me take you through the steps to configure SSO for Salesforce.

Single Sign-On for Salesforce:

Step 1: Configuring ADSelfService Plus

Login to ADSelfService Plus web console with the administrator credentials.
Go to Configuration --> Self-Service --> Password Synchronizer/ Single Sign-On link.
Click on the Salesforce link and this will redirect to the configuration page.
In the Modules drop-down list, select Single Sign-On.
Input the SAML Redirect URL. (https://<sub-domain>.salesforce.com)
Enter the Salesforce domain name.
Select the Self-Service Policies from the drop-down list.
Click Download SSO certificate button in the top right-hand side of the page.
In the SSO/SAML details pop-up box that appears, copy the first three fields (Login URL, Logout URL, and Error/Help URL) and click on the Download SSO Certificate link to download the identity verification certificate.
Click Save.

Step 2: Configuring Salesforce

Login to Salesforce with the administrator credentials.
Click on the Administer tab.
Navigate to Security Controls option and select Setup Single Sign-On.
In the SAML Single Sign-On Settings page that opens up, input your name and API name.
Enter the issuer URL. (http://<ADSSP-server-url >/iamapps/ssologin)
Upload the verification certificate downloaded in step 1.
Set the SAML identity location to the NameIdentifier element.
Paste the values of the three fields that was copied from ADSelfService Plus web-console in step 1 to the Identity Provider Login URL, Identity Provider Logout URL, and Custom Error URL fields. (Refer Image)
Click Save.