function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
Dru - Cloud62Dru - Cloud62 

SAML single sign on for select profiles

Is it possible to use SAML single sign on for only certain profiles?


If so, How?

Scott T.Scott T.

There are likely other ways to achieve this, but one option is to set up Salesforce SSO configuration so that the SAML User ID Type is "Assertion contains the Federation ID from the User object".  Then, only the user accounts that you want to allow SSO into would have the "Federation ID" property set properly to map the incoming user's SAML assertion.


You may want to also concisder how this is controlled from your IdP side (i.e.: who can login, send a SAML assertion to Salesforce, etc.).  A solution there would depend on what your IdP software is.