function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
vshyam121vshyam121 

trouble with SSO

Hi,
I'm sending some assertions to the recipient url that salesforce told me but it doesn't let me sign on. When I go to the login history, I don't even see any failed attempts. Anything right off the bat that I'm not doing?
 
Also, are these messages I send to salesforce supposed to be a saml response or a saml assertion. Both ways don't work for me but I'd just like to know. Is Salesforce expecting the x509 certificate in the assertion? In the response I know where to put in the signature tag and so on, but with a normal assertion, I don't know where to put in the certificate.
 
Thanks in advance.
jongleejonglee
We are supporting SAML 1.1 browser POST profile.  So you must send SAMLResponse post param.   We don't require a separate signature for SAML assertion but if it's present, we will validate it.  The signature for the SAML Response is mandatory though.  There is no need to include the X509 in the signature.  We will always validate against the one you uploaded in the configuration.

thanks
Jong Lee
Salesforce.com