Salesforce

Ironchip acts as the identity provider (IdP) for Salesforce over SAML. This guide explains how to enable single sign-on and, optionally, how to require users or groups to sign in with Ironchip only.

Requirements

• Access to the Ironchip admin console.
• A user with the permissions needed to configure Salesforce.

Configure single sign-on

1. Sign in to Salesforce as an administrator and go to Setup.

   

2. Go to Identity and then Single Sign-On Settings.

   

3. Click Edit, enable SAML Enabled, and click New from Metadata File.

   

4. In the Ironchip admin console, go to Applications and click New application.

   

5. On the Custom application card, click Create application.

   

6. Select the SAML type and download the metadata file with Download metadata file.

   

7. Upload the downloaded file to Salesforce and click Create.

   

8. Save the changes (change the name if you want) and download the Salesforce metadata with Download Metadata.

   

9. Upload that file to a public internet address and enter its URL, in raw format, in the Metadata URL field of the Ironchip form.

   

10. Click Add service to add the application.

11. Create the users in Ironchip as shown in the video. The username must be the same as in Salesforce.

Creating Salesforce users in IronchipPlay video

Activate Ironchip as an authentication method

1. In Salesforce, search for My Domain with the search bar.

   

2. In Authentication Configuration, click Edit.

   

3. Under Authentication Service, select the new authentication method and click Save.

   

The integration is now configured.

Verify the integration

1. Go to the Salesforce sign-in page and select the Ironchip sign-in option shown below the form.

   

2. Enter the username.

   

3. Authorize the connection from the Ironchip app.

   

Salesforce with Ironchip only

This part explains how to configure Salesforce so the users or groups you choose can only authenticate with Ironchip.

Requirements

• Salesforce protected by Ironchip.
• The users you are going to configure already added in Ironchip.

Configuration

1. Go to Single Sign-On Settings and enable Disable login with Salesforce credentials.

   

2. Go to Permission Sets and click New.

   

3. After you create the set, enter Single Sign-On in the search bar and click the only option that appears.

   

4. Click Edit, enable the marked option, and save the changes.

   

5. Go to the Users or Groups panel, depending on which one you want to modify, and click the name of the user or group.

   

6. Scroll down to Permission Set Assignments and click Edit.

   

7. Add the set you created at the beginning and save the changes.

   

Verify the restriction

Try to sign in with the credentials of a user configured with this rule. Entering a Salesforce username and password doesn’t let you in. Using Ironchip does.