Single Sign-On with SAML on Force.com

December 3rd, 2009

My article entitled “Single Sign-On with SAML on Force.com” is now available on the developerforce wiki.

“Implementing a Single Sign-On (SSO) infrastructure enables users to sign in once and have access to all authorized resources. In this article, we’ll look at the different methods of implementing SSO with Force.com, how to set up your own open source identity management system for federated authentication using SAML 2, and how to configure the Force.com platform to utilize your new identify provider. We’ll also provide some troubleshooting techniques and outline some best practices to help you avoid common roadblocks, getting you up and running fast…”

Read the entire article on the developerforce wiki…

Categories: Salesforce

6 Comments

Jason June 24th, 2010
Nice tut. I would make one suggestion though. Oracle has now stopped producing the OpenSSO Express version, and only has OpenSSO Enterprise. In this version the Salesforce integration is removed. I had to learn that the hard way.

Forge Rock took over the Express version, and if you down load OpenAM from them, everything works as advertised.
http://forgerock.com/openam.html
Jeff Douglas June 24th, 2010
Jason, thanks for the great tip! I may be doing some SSO work shortly and am glad you posted this.
Sam February 24th, 2011
Jeff,

Thanks for posting the article regarding the SSO integration, it did help me in getting a better picture. We are in the process of implementing SAML integration with SFDC & we were able to establish an active connection. I was wondering if there are any specific areas we need to test before going live so that we are sure that users dnt face any problems.

Appreciate your response.

Thanks!!
Yagna April 11th, 2011
I am working on setting up openAM on Glassfish server v3. Everything works fine, but I get an error when I try to deploy opensso.war using the applications link from the admin console.

Error: “Error occurred during deployment: Exception while loading the app : java.lang.IllegalStateException: ContainerBase.addChild: start: org.apache.catalina.LifecycleException: org.apache.catalina.LifecycleException: javax.servlet.ServletException: com.sun.xml.ws.transport.http.servlet.WSServletException: WSSERVLET11: failed to parse runtime descriptor: javax.xml.ws.WebServiceException: WSP1007: Policy exception occured when finishing WSDL parsing.. Please see server.log for more details.”.
Any suggestions?
ChamingaD May 30th, 2011
I need SSO solution to login from Salesforce to Google App Engine.

Can I know how ?
Jeff Douglas July 21st, 2011
@ChamingaD, try this project.