Salesforce Secure Internet Single Sign On & Provisioning

Identity management software has proven itself in terms of functionality, cost savings, user experience and improved security — but most do not support SaaS applications like Salesforce. PingFederate® from Ping Identity® extends secure Internet Single Sign-on (SSO) and user provisioning to Salesforce, giving both end users and administrators capabilities they have come to appreciate with other applications. PingFederate automates Salesforce provisioning, provides SSO for the many ways users access Salesforce, deploys rapidly and works with existing infrastructure—all while also supporting any other federated identity-enabled business partners.

Category:

Science & Technology

Tags:

• salesforce
• single
• sign
• on
• SaaS
• provisioning
• de-provisioning
• salesforce.com
• sso

[theaabrego]

Great video! However I have one question..

In the second escenario where the user is outside the coporate's network..(3:40..) It is said that when the salesforce url is typed in the web browser... "user is redirected to their home organization where they are ask to authenticate". how does this happen?.. Is it really when the url is typed?? or does the user have to login with some other credentials in the salesforce login page?..I mean.. what triggers the redirection to an especific corporation?

[PingIdentityVids]

@theaabrego I believe you are referring to Salesforce's delegated authentication capability that we support. When the user gets to SF, SF prompts them for username/ password. SF usernames are email addresses that include the user's domain name. SF uses the domain name to figure out where to send the credentials via a secure Web service call. The IdP then validates the credentials and responds with a yes/no web service call. If it is yes, SF creates a session.

-M.Donaldson, VP Marketing, Ping

[miteshsura]

Can user be redirected to a specific page in SF after they have authenticated via Ping?

The reason I ask, we have email going out, and we were thinking to have Ping url with SF id in those emails. Once user is authenticated, they should be redirected to that SF id we passed.

Can that be done? A short answer or a link in the right direction will help a lot.

Thanks for the time.

[deepakaranam]

Thank you. Your pictorial explaianation is excellent because a picture is worth Thousand words !! :)