You are here:
To ensure that your SAML service provider can recognize Salesforce users when they log in with single sign-on (SSO), update user information in Salesforce. Provide user identifiers that the service provider recognizes.
| Available in: both Salesforce Classic and Lightning Experience |
| Available in: Developer, Enterprise, Performance, Unlimited, and Database.com Editions |
| User Permissions Needed | |
|---|---|
| Define and modify identity providers and service providers: | Customize Application |
Before you start, complete these steps.
The identifier you use depends on which Subject Type the service provider expects in the SAML assertion. For example, if the Subject Type is Username, the service provider expects the user’s Salesforce username in the subject of the SAML assertion. Salesforce sends the username in the SAML assertion, and the service provider recognizes it and identifies the user. You specify the Subject Type when you integrate the service provider as a SAML-enabled app.
If the Subject Type is Federation ID, you must provide a Federation ID in the user’s Salesforce settings. By updating the Federation ID, you ensure that the service provider can recognize the user when Salesforce sends SAML assertions.
To map multiple users at a time, use SOAP API. For more information, see SOAP API Developer Guide
To map an individual user in your org to the service provider, complete these steps.
We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.