Loading
Important Advisory: iOS Update Impacting CG Mobile ApplicationRead More
Secure Your Salesforce Org
Require Users to Log In with Single Sign-On (SSO)

You are here:

  1. Salesforce Help
  2. Docs
  3. Secure Your Salesforce Org

Require Users to Log In with Single Sign-On (SSO)

By default, when you set up single sign-on, users can log in from the SSO provider or from Salesforce. To ensure that users can’t bypass your SSO system, disable their ability to log in with their Salesforce username and password so that they’re required to log in with SSO. We recommend that you don’t require SSO for Salesforce admins so that they can still access Salesforce to respond to SSO outages or other issues.

Required Editions

Available in: both Salesforce Classic and Lightning Experience
Available in: all editions
User Permissions Needed
To view the settings: View Setup and Configuration
To edit the settings:

Customize Application

AND

Modify All Data
  1. From Setup, use the Quick Find box to find and select Single Sign-On Settings.
  2. Click Edit.
  3. Select Disable login with Salesforce credentials and save your changes.
    This setting doesn’t directly disable username-password logins for all users. It applies only to users who have the “Is Single Sign-On Enabled” user permission. As long as you don’t assign this permission to users—such as admin users who must be able to log in if SSO is down— they can still log in with their Salesforce credentials when this setting is turned on.
  4. To require SSO of certain users, assign them the “Is Single Sign-On Enabled” user permission.
    1. Create a permission set that includes the “Is Single Sign-On Enabled” user permission. Or, add this permission to an existing permission set.
    2. Assign the permission set to the users.
      Important
      Important As recommended, to exempt admins from the SSO requirement, don’t assign the “Is Single Sign-On Enabled” user permission.
  5. If you change an SSO implementation that users are currently using, ensure that users know the new URL where they can access your SSO login page.
 
Loading
Salesforce Help | Article