function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
john n 5john n 5 

sso direct login

how to disable direct login for user when sso is enabled and admin should be login using test.salesforce.com.

Do anyone has test in developer org?if yes how can these be implementated.
VinayVinay (Salesforce Developers) 
Hi John,

It is recommended to allow system administrator users to login with both the authentication methods. To achieve this, kindly disable login policy 'Prevent login from https://login.salesforce.com' in your org under Policies section.

Enable delegated authentication and below are steps.
  • Setup--> Quick Find, search for Single Sign-On and select Single Sign-On Settings. Under Delegated authentication, select 'Disable login with Salesforce credentials'.
  • Disable login with Salesforce credentials will only impact SSO users with 'Is Single Sign-On Enabled' permission enabled and will only allow them to access Salesforce via SSO.
  • Make sure you do not enable 'Is Single Sign-On Enabled' permission for the System Admin and efficient way would be assigning above permission to non-admin users using permission set.

https://help.salesforce.com/s/articleView?id=release-notes.rn_auth_delegated_authentication.htm&release=226&type=5

Please mark as Best Answer if above information was helpful.

Thanks,
sravani proddatur 10sravani proddatur 10
Hi John,

In Setup, in the Quick Find box, enter Single Sign-On , then select Single Sign-On Settings.
Click Edit.
In Delegated Authentication, select Disable login with Salesforce credentials, then save your changes.

If it's helpful to you plz mark the best answer, Thanks.