Contents
How to use AD FS to support Salesforce1?
To successfully implement SSO so that it works with Salesforce1, you must make sure that the server is configured correctly to support the idosyncrocies of Salesforce1, which is more stringent than other clients (e.g. every major web browser on the market). This answer documents some common mistakes and outlines how to correctly configure AD FS.
How to set single sign on in Salesforce.com?
However, do you need to make sure that the settings match in both places. In ADFS, check Properties > Advanced > Secure Hash Algorithm, and make sure it matches in salesforce.com under Setup > Security Controls > Single Sign-On Settings > Request Signature Method (if you have multiple configurations enabled, each one has its own setting).
How to enable single sign on in ADFS?
In ADFS, check Properties > Advanced > Secure Hash Algorithm, and make sure it matches in salesforce.com under Setup > Security Controls > Single Sign-On Settings > Request Signature Method (if you have multiple configurations enabled, each one has its own setting).
What kind of SSL certificate do I need for AD FS?
When configuring AD FS’s SSL feature, you must use a certificate that matches the domain name you specified, and that certificate must be a CA-signed certificate, such as by Verisign.
How to configure AD FS support for user certificate authentication?
Usually, you will see a blank screen or a 500 server error when this issue occurs. Note the hostname and port that you have configured in AD FS Ensure that any firewall in front of AD FS or Web Application Proxy (WAP) is configured to allow the hostname:port combination for your AD FS farm.
Can you use a valid SSL certificate for Salesforce1?
If you’re not going to support Salesforce1 on that server, you can use any valid certificate for SSL. In original testing, we installed the IIS role and generated a certificate for this purpose.
How to enable username hints in AD FS?
AD FS does not support Username Hints with SmartCard/Certificate based authentication. Configure AD FS for user certificate authentication Enable user certificate authentication as an intranet or extranet authentication method in AD FS, using either the AD FS Management console or the PowerShell cmdlet Set-AdfsGlobalAuthenticationPolicy.