Loading
Prepare for Email to Become the Default Login ExperienceRead More
Intermittent freezing when using using certain browser versionsRead More
Secure Your Salesforce Org
Prompt Users to Reauthenticate and Reauthorize

You are here:

  1. Salesforce Help
  2. Docs
  3. Secure Your Salesforce Org

Prompt Users to Reauthenticate and Reauthorize

When you set up single sign-on (SSO) with an authentication provider, you can optionally add the prompt URL request parameter to client configuration URLs. This parameter specifies how the authorization server prompts the user to log in again and reapprove data access. For example, you can make a user log in again after signing up for an account.

Required Editions

Available in: Lightning Experience and Salesforce Classic
Available in: Enterprise, Performance, Unlimited, and Developer Editions
User Permissions Needed
To view the settings: View Setup and Configuration
To edit the settings:

Customize Application

AND

Manage Auth. Providers

To control how the authorization server prompts the user to reauthenticate and reauthorize, add the prompt parameter to client configuration URLs. The third party determines which values are supported for this parameter. Consult your third party to determine which values you can use.

For example, you set up a Google authentication provider to configure SSO with your Salesforce org as the relying party. After users create a Google account, you want to prompt them to log in with their new Google credentials. To configure this prompt, add the prompt parameter to your SSO client configuration URL, and use values supported by Google.

A Salesforce authentication provider supports the following values for the prompt parameter:

  • login—The authorization server prompts the user for reauthentication, forcing the user to log in again.
  • consent—The authorization server prompts the user to reauthorize third-party data access before returning information to the relying party.
Example
Example This example uses Salesforce-supported values. Here’s the Single Sign-On Initialization URL with the prompt parameter added and set to login: 
https://login.salesforce.com/services/auth/sso/00Di0000000hqQ8EAI/FB?prompt=login
You can also pass both values, separated by a space, to make the user log in and reauthorize. For example: ?prompt=login consent.

If you don’t add the prompt parameter, the user can continue with their existing session without logging in again.

 
Loading
Salesforce Help | Article