Skip to main content
All CollectionsUser ManagementSingle Sign On
Configuring Single Sign On with SalesForce
Configuring Single Sign On with SalesForce

For Enterprise users only

Greg Jones avatar
Written by Greg Jones
Updated over 3 years ago

This article describes setting up single sign-on (SSO) with SalesForce. This feature must be enabled in your account by a MetaLocator support technician in order to function as shown in this article.

Step 1. Configure the Account

Login as the Account Owner and go to My User Profile

Scroll down and expand Show Advanced Options, then update the following options according to your SalesForce settings.

onelogin_saml_idp_domain

Set this to the domain associated with your email address, e.g. customer.com. This ensures that the anonymous link on our login form knows which SSO to invoke based on an incoming email.

Within SalesForce, create a new Connected App called "MetaLocator", with the following options:

Entity Id:
metalocator-saml

Issuer:

https://<your salesforce url>.my.salesforce.com (change to your actual SalesForce URL, this should match the setting in MetaLocator for EntityID)

Name ID Format:
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified

IdP Certificate:
Default IdP Certificate

Link to the Start URL in your SalesForce App Launcher or within your own HTML pages. Ensure the numeric ID value is properly configured in the URL with your account owner's user ID, as displayed in the user profile menu.

Users will be created on the fly based on the email address coming from SalesForce. The accounts will be created as "blocked" accounts with no access to any MetaLocator features. The requesting user will receive an email that their account is pending review and the account owner will receive an email notification that an account is pending review as shown below:

Click the link provided and login as the account owner. Click the username to edit the user. Choose an appropriate user type:

Click Save, then enable the user as shown below. This triggers an email notification to the new SSO user indicating that their login has been enabled.

The email notification is shown below.

When the user logs in, they will now see the resources available to them, based on the type of user chosen above.

Did this answer your question?