function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
mkaufmanmkaufman 

Delegated Authentication SSO stopped working in Spring '14

Is anyone else using Delegated Authentication to Single Sign-On to Salesforce?  It was working fine for a year but stopped this weekend after our org was updated to Spring '14.  After login we are redirected to this page: https://na9.salesforce.com/_nc_external/identity/ic/ICNotNeeded  with a message stating
Activation complete  Your device has been automatically activated based upon network location.
We click Continue and are redirected to the Login page instead of being redirected to the home page!

Anyone else experience this?
NehalNehal (Salesforce Developers) 
Hi,

This seems to be an issue with Spring '14 Release. Below are few workaorunds which you can try:

1.Try with one user to remove activated browsers(From Setup | Security Controls | ""Activated Client Browsers"" ) and activated IP(include unchecked 10.232.12.160, 162,163). We expect they will go through Identity challenge flow again and will be able to login.

2.Remove ""sfdc_lv2"" cookie and retry. After remove ""sfdc_lv2"" cookie, user will get IC challenge again.

3.You should add SFDC outbound proxy IP 10.232.12.160 to 163 to org trusted IP range.

4. Try to whitelist the ip range 10.232.12.160 to 163 to org trusted IP range , and try again

5.Also if  required, have individual users activate IP through IC, let user delete ""sfdc_lv2"" cookie in browser and retry. It is expected to go through IC flow again. 


"I hope this information has been helpful. If this has helped resolve your issue, please let us know by marking the post as ""Best Answer"" to help others in the community with similar questions. "
mkaufmanmkaufman
Unfortunately these instructions did not work.  What is the difference between steps 2 and 3?

Also the instructions should say "Activations" not "Activated Client Browsers".

Are you sure it's 10.232.12.160-163?  I'm seeing activations for 10.234.12.160