Developing, testing, and deploying apps means switching between multiple Salesforce environments and providing login credentials each time. Single sign-on (SSO) simplifies this process by letting an Environment Hub user log in to member orgs without reauthenticating. You can set up SSO by defining user mappings manually, using Federation IDs, or creating a formula.
|Available in: both Salesforce Classic and Lightning Experience|
|Available in: Enterprise, Performance, and Unlimited Editions|
The Environment Hub supports these SSO methods for matching users.
|Mapped Users||Match users in the Environment Hub to users in a member org manually. Mapped Users is the default method for SSO user mappings defined from the member detail page.|
|Federation ID||Match users who have the same Federation ID in both the Environment Hub and a member org.|
|User Name Formula||Match users in the Environment Hub and a member org according to a formula that you define.|
If you specify multiple SSO methods, they’re evaluated in this order: (1) Mapped Users, (2) Federation ID, and (3) User Name Formula. The first method that results in a match is used to log in the user, and the other methods are ignored. If a matching user can’t be identified, the Environment Hub directs the user to the standard Salesforce login page.
SSO doesn’t work for newly added users or for user mappings defined in a sandbox org. Only add users, edit user information, or define SSO user mappings in the parent org for the sandbox.