Configure SSO from Salesforce to LogMeIn GoToMeeting, GoToWebinar, or GoToTraining

Set Up Your Salesforce Org as an Identity Provider

With the My Domain feature, your Salesforce org is enabled as an identity provider. My Domain is required for all orgs. If you don’t like your org’s My Domain name, you can change it.

The My Domain feature also creates a certificate and key pair. The certificate establishes trust between your Salesforce org and ADP. Optionally, you can use another self-signed certificate or import a CA-signed certificate.

To provide a certificate and other information about your org to LogMeIn:

1. From Setup, enter Identity Provider in the Quick Find box, and select Identity Provider.
2. Click Download Metadata.
3. Optionally, to download the Salesforce self-signed certificate to a file, click Download Certificate.

Configure SAML Settings in LogMeIn

1. Navigate to https://authentication.logmeininc.com/saml/settings.html, and log in as an administrator.
2. On the SAML configuration page, you can upload metadata or configure the settings manually.
   1. To configure settings using the metadata, specify the metadata URL.
   2. To configure settings manually:
      • For Sign-out page URL, enter https://MyDomainName.my.salesforce.com/secur/logout.jsp. For example, https://identitydemo.my.salesforce.com/secur/logout.jsp.
      • For Sign-in page URL, enter https://MyDomainName.my.salesforce.com/idp/endpoint/HttpRedirect. For example, https://identitydemo.my.salesforce.com/idp/endpoint/HttpRedirect.
      • To upload the Salesforce certificate, browse and select the file to upload.
3. Save the settings.

Create a Connected App in Salesforce

1. In Salesforce, create a connected app.
   • In Lightning Experience, from Setup, enter App in the Quick Find box, and select App Manager. Click New Connected App.
   • In Salesforce Classic, from Setup, enter Apps in the Quick Find box, and select Apps. Under Connected Apps, click New.
2. Configure the connected app Basic Information settings.
   1. Enter a name for the GoTo connected app. Salesforce uses this name to populate the API name.
   2. Enter your email address so Salesforce can contact you or your support team.
   3. Optionally, upload or specify a logo and icon to represent your GoTo application in the Salesforce App Launcher.
3. Configure the connected app Web App Settings.
   1. Select Enable SAML.
   2. For Entity Id, enter https://authentication.logmeininc.com/saml/sp.
   3. Enter the ACS URL.
      • For GoToMeeting, enter https://authentication.logmeininc.com/saml/acs.
      • For GoToWebinar, enter https://authentication.logmeininc.com/saml/acs.
      • For GoToTraining, enter https://authentication.logmeininc.com/saml/acs.
   4. For Subject Type, select how users are identified to the identity provider, for example, Federation ID or Custom Attribute. In either case, the SAML subject type must match the identity of the LogMeIn user’s registered email ID.
   5. For Name ID Format, keep the default value.
   6. For Issuer, keep the default value, which is your My Domain login URL.
   7. For IdP Certificate, keep the default (Default IdP Certificate).
4. Save the settings.
5. Configure profiles and permission sets for the connected app.
   1. From Setup, enter Apps in the Quick Find box.
      • If you’re using Lightning Experience, select Manage Connected Apps.
      • If you’re using Salesforce Classic, under Manage Apps, select Connected Apps.
   2. Click the name of your connected app for GoTo. The connected app detail page appears.
   3. Click Manage Profiles or Manage Permission Sets, and add profiles or permission sets for the users who can access this app.
6. In Salesforce, enter the start URL for the connected app.
   1. On the connected app detail page, under SAML Login Information, copy the IdP-initiated login URL.
   2. On the connected app detail page, click Edit Policies.
   3. For Start URL, paste the IdP-initiated login URL.
   4. Save the settings.

Test the SSO Configuration

In Salesforce, from the App Launcher, find and open the GoTo app. If you configured the GoTo logo and icon for the connected app, the App Launcher displays them. If identity provider–initiated SSO is configured properly, Salesforce creates an application session.

Note LogMeIn only supports identity provider–initiated SSO. It doesn’t support service provider–initiated SSO. Therefore, if you go directly to the GoToMeeting, GoToWebinar, or GoToTraining URLs, SSO to Salesforce doesn’t work.