Loading
Identify Your Users and Manage Access
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Prompt Users to Reauthenticate and Reauthorize

            You are here:

            1. Salesforce Help
            2. Docs
            3. Identify Your Users and Manage Access

            Prompt Users to Reauthenticate and Reauthorize

            When you set up single sign-on (SSO) with an authentication provider, you can optionally add the prompt URL request parameter to client configuration URLs. This parameter specifies how the authorization server prompts the user to log in again and reapprove data access. For example, you can make a user log in again after signing up for an account.

            Required Editions

            Available in: Lightning Experience and Salesforce Classic
            Available in: Enterprise, Performance, Unlimited, and Developer Editions
            User Permissions Needed
            To view the settings: View Setup and Configuration
            To edit the settings:

            Customize Application

            AND

            Manage Auth. Providers

            To control how the authorization server prompts the user to reauthenticate and reauthorize, add the prompt parameter to client configuration URLs. The third party determines which values are supported for this parameter. Consult your third party to determine which values you can use.

            For example, you set up a Google authentication provider to configure SSO with your Salesforce org as the relying party. After users create a Google account, you want to prompt them to log in with their new Google credentials. To configure this prompt, add the prompt parameter to your SSO client configuration URL, and use values supported by Google.

            A Salesforce authentication provider supports the following values for the prompt parameter:

            • login—The authorization server prompts the user for reauthentication, forcing the user to log in again.
            • consent—The authorization server prompts the user to reauthorize third-party data access before returning information to the relying party.
            Example
            Example This example uses Salesforce-supported values. Here’s the Single Sign-On Initialization URL with the prompt parameter added and set to login: 
            https://login.salesforce.com/services/auth/sso/00Di0000000hqQ8EAI/FB?prompt=login
            You can also pass both values, separated by a space, to make the user log in and reauthorize. For example: ?prompt=login consent.

            If you don’t add the prompt parameter, the user can continue with their existing session without logging in again.

             
            Loading
            Salesforce Help | Article