You are here:
Single Sign On (SSO) for Mobile Applications
Single sign-on is a process that allows network mobile application users to access all authorized network resources without having to log in separately to each resource.
Single sign-on allows orgs to validate username and password against their user database or other client apps rather than having separate username and password managed by Salesforce.
Federated Authentication Support
When federated authentication is enabled, Salesforce doesn’t validate a user’s password. Instead, Salesforce verifies an assertion in the HTTP POST request, and allows single sign-on if the assertion is true. Federated authentication is the default form of single sign-on.
See “Configuring SSO for Mobile and Desktop Apps Using SAML and OAuth” for more information.
Delegated Authentication Support
When delegated authentication is enabled, Salesforce doesn’t validate a user’s password. Instead, Salesforce makes a web services call to a customer org to establish authentication credentials for the user. Admins must request Salesforce to enable delegated authentication support.
See “Understanding Delegated Authentication Single Sign-On” for more information.

