Configure SSO from Salesforce to AgileApps Cloud

Set Up Your Salesforce Org as an Identity Provider

With the My Domain feature, your Salesforce org is enabled as an identity provider. My Domain is required for all orgs. If you don’t like your org’s My Domain name, you can change it.

The My Domain feature also creates a certificate and key pair. The certificate establishes trust between your Salesforce org and ADP. Optionally, you can use another self-signed certificate or import a CA-signed certificate.

To download the Salesforce self-signed certificate:

1. From Setup, enter Identity Provider in the Quick Find box, and select Identity Provider.
2. Click Download Certificate.

Configure SAML Settings in AgileApps Cloud

1. Log in to your AgileApps Cloud account as an administrator.
2. Under Settings, Administration, and Account Management, navigate to Single Sign-On Settings.
3. Under Single Sign-On Using, select SAML.
4. Configure the SAML settings for your identity provider.
   1. For SAML version, select 2.0.
   2. For Issuer, enter https://MyDomainName.my.salesforce.com. For example, https://identitydemo.my.salesforce.com.
   3. For User Id Type, select the type of identifier. For example, select Federated Id.
   4. For User Id Location, enter an attribute tag that defines the location of the User Id. For example, select Subject.
   5. For SAML Third Party authentication URL, enter the identity provider endpoint, for example, https://MyDomainName.my.salesforce.com/idp/endpoint/HttpRedirect.
   6. For Issuer Certificate, browse and select the Salesforce certificate that you downloaded previously. Click Upload.
   7. Save the settings.

   AgileApps Cloud displays URLs that you use later to configure the connected app in Salesforce.

   • Assertion Consumer Service EndPoint—When you set up the connected app, this URL is the ACS URL.
   • Platform Authentication Service URL—When you set up the start URL for the connected app, use this URL as the first part of the start URL.

Create a Connected App in Salesforce

1. In Salesforce, create a connected app.
   • In Lightning Experience, from Setup, enter App in the Quick Find box, and select App Manager. Click New Connected App.
   • In Salesforce Classic, from Setup, enter Apps in the Quick Find box, and select Apps. Under Connected Apps, click New.
2. Configure the connected app Basic Information settings.
   1. Enter a name for the AgileApps Cloud connected app. Salesforce uses this name to populate the API name.
   2. Enter your email address in case Salesforce needs to contact you or your support team.
   3. Optionally, upload or specify a logo and icon to represent your AgileApps Cloud application in the Salesforce App Launcher.

   

3. Configure the connected app Web App Settings.
   1. Select Enable SAML.
   2. For Entity Id, enter yourdomain.agileappscloud.com. For example, https://acme.agileappscloud.com.
   3. For ACS URL, enter https://yourdomain.agileappscloud.com/saml/ssoResponse. For example, https://acme.agileapps.com/access/saml.
   4. For Subject Type, choose how users are identified to the identity provider, for example, Federation ID. A federation ID is a unique value assigned to the user across multiple web services and Salesforce orgs.
   5. For Name ID Format, keep the default value.
   6. For Issuer, keep the default value, which is your My Domain login URL.
   7. For IdP Certificate, keep the default (Default IdP Certificate).

      

4. Save the settings.
5. Configure profiles and permission sets for the connected app.
   1. From Setup, enter Apps in the Quick Find box.
      • If you’re using Lightning Experience, select Manage Connected Apps.
      • If you’re using Salesforce Classic, under Manage Apps, select Connected Apps.
   2. Click the name of your connected app for AgileApps Cloud. The connected app detail page appears.
   3. Click Manage Profiles or Manage Permission Sets, and add profiles or permission sets for the users who can access this app.
6. Create the start URL for the connected app.
   1. On the connected app detail page, click Edit Policies.
   2. For the beginning of the start URL, paste the Platform Authentication Service URL that AgileApps Cloud displayed when you configured the SAML settings.
   3. Append the parameter done= to the Platform Authentication Service URL. For example, https://acme.agileappscloud.com/networking/saml/ssoRequest?ticket=cfcflmhgbdh?done=.
   4. Navigate to the landing page that you want the user to see after successful SSO authentication.
   5. Copy the segment of the URL in the browser address bar after networking/.
   6. Paste this segment as the argument to the done= parameter. For example, if the URL is https://acme.agileappscloud.com/networking/dashboard/1555611998oxd1878317529, copy dashboard/1555611998oxd1878317529. For example, the entire Start URL is https://acme.agileappscloud.com/networking/saml/ssoRequest?ticket=cfcflmhgbdh?done=dashboard/1555611998oxd1878317529.
   7. Save the settings.

Test the SSO Configuration

In Salesforce, from the App Launcher, find and open the AgileApps Cloud app. If you configured the AgileApps Cloud logo and icon for the connected app, the App Launcher displays them. If SSO is configured properly, Salesforce creates an application session.