Configure SSO from Salesforce to Syncplicity

Set Up Your Salesforce Org as an Identity Provider

With the My Domain feature, your Salesforce org is enabled as an identity provider. My Domain is required for all orgs. If you don’t like your org’s My Domain name, you can change it.

The My Domain feature also creates a certificate and key pair. The certificate establishes trust between your Salesforce org and ADP. Optionally, you can use another self-signed certificate or import a CA-signed certificate.

To download the Salesforce self-signed certificate:

1. From Setup, enter Identity Provider in the Quick Find box, and select Identity Provider.
2. Click Download Certificate.

Configure SAML Settings in Syncplicity

1. Log in to your Syncplicity account as a SAML-enabled administrator.
2. Under admin, click Configure Authentication Settings.
3. To create a custom-branded domain to which users log in, enter a domain name, for example, sales.

   

4. Configure the SSO settings.
   1. For Single Sign-On Status, select Enabled.
   2. For Entity Id, enter your My Domain login URL, for example, https://MyDomainName.my.salesforce.com.
   3. For Sign-in page URL, enter the endpoint to which users are redirected for authentication, for example, https://MyDomainName.my.salesforce.com/idp/endpoint/HttpRedirect.
   4. For Logout page URL, enter the page to which the user is redirected after logging out from Syncplicity, for example, https://my.syncplicity.com/.
   5. Choose and upload your Salesforce certificate in .CER or .PEM format.
   6. Save the settings.

Create a Connected App in Salesforce

1. In Salesforce, create a connected app.
   • In Lightning Experience, from Setup, enter App in the Quick Find box, and select App Manager. Click New Connected App.
   • In Salesforce Classic, from Setup, enter Apps in the Quick Find box, and select Apps. Under Connected Apps, click New.
2. Configure the connected app Basic Information settings.
   1. Enter a name for the Syncplicity connected app. Salesforce uses this name to populate the API name.
   2. Enter your email address in case Salesforce needs to contact you or your support team.
   3. Optionally, upload or specify a logo and icon to represent your Syncplicity application in the Salesforce App Launcher.

      

3. Configure the connected app Web App Settings.
   1. Select Enable SAML.
   2. For Entity Id, enter the URL for your Syncplicity entity, for example, https://SyncplicityOrgName.syncplicity.com/sp.
   3. For ACS URL, enter a URL for the assertion consumer service, using the format https://SyncplicityOrgName.syncplicity.com/Auth/AssertionConsumerService.aspx. For example, https://sales.syncplicity.com/Auth/AssertionConsumerService.aspx.
   4. For Subject Type, select the method attribute by which a username maps to a unique Salesforce user identity, for example, FederationID. A federation ID is a unique value assigned to the user across multiple web services and Salesforce orgs.
   5. For Name ID Format, select urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress.
   6. For Issuer, keep the default value, which is your My Domain login URL.
   7. For IdP Certificate, keep the default (Default IdP Certificate).

   

4. Save the settings.
5. Configure profiles and permission sets for the connected app.
   1. From Setup, enter Apps in the Quick Find box.
      • If you’re using Lightning Experience, select Manage Connected Apps.
      • If you’re using Salesforce Classic, under Manage Apps, select Connected Apps.
   2. Click the name of your connected app for Syncplicity. The connected app detail page appears.
   3. Click Manage Profiles or Manage Permission Sets, and add profiles or permission sets for the users who can access this app.
6. Enter the start URL for the connected app.
   1. On the connected app detail page, click Edit Policies.
   2. For Start URL, enter the URL for service provider–initiated SSO using the format https://SyncplicityDomain.syncplicity.com. For example, https://sales.syncplicity.com/.
   3. Save the setting.

Test the SSO Configuration

In Salesforce, from the App Launcher, find and open the Syncplicity app. If you configured the Syncplicity logo and icon for the connected app, the App Launcher displays them. If SSO is configured properly, Salesforce creates an application session.