Forum Discussion

russm's avatar
russm
Icon for Helper I rankHelper I
9 years ago

Single sign-in authentication in Salesforce

  Hi All,   Can anyone point me toward a solution that will allow me to extract reports from Salesforce in a single sign-in authentication context?   Salesforce is a new platform for me and the ...
russm's avatar
russm
Icon for Helper I rankHelper I
9 years ago

Hi InaNortje, Thanks for the quick follow-up!  I'm glad to hear that you are having success within a single sign-in context.  You’ve given me hope!

 

I have tried 1, 2 and 3.  It's possible that I am miss-formatting something in the custom domain attempt. 

 

Regardless to the method, when I select sign-in, a browser shell opens within PBI that shows the Salesforce Web UI with me authenticated.  The only option that I see is to close the window, which pops an assert in the authentication dialog saying I failed to authenticate, try again later.

 

InaNortje's avatar
InaNortje
Icon for Advocate I rankAdvocate I
9 years ago

russm, I tried selecting "Production" (while we are really on a custom domain).  That failed the authentication and caused the Salesforce WebUI to appear.  At that point, if you are on a custom domain, you type in only the domain name. You will see that Salesforce fills out the rest of the URL.  Then just your normal logon userid and password, and you should get access.

 

  • russm's avatar
    russm
    Icon for Helper I rankHelper I
    9 years ago

    InaNortje, I don't have my own Salesforce credentials.  I gather some handshake is done in AD.  My experince is still a fail.  Here (attached) is what happend when I attemtped the flow that I think you are describing.

    Attempt to connect to Salesforce from within a single sign-in context.

    • InaNortje's avatar
      InaNortje
      Icon for Advocate I rankAdvocate I
      9 years ago

      Hi russm

       

      From the final message you received, it seems like there were credentials cached somewhere which was not valid for the Salesforce login.  

       

      Salesforce can be set up to use different methods of authentication for single sign-on.   Can you check with your Salesforce admins how your company's single sign-on is configured?  Maybe your method allows for some form of caching.

       

      Our single sign-on use Active Directory Federation Services.  That seems to make it quite seamless for us at least.

       

       

      I'm sorry I cannot be more helpful on this one.

       

      Regards

       

      Ina

      • russm's avatar
        russm
        Icon for Helper I rankHelper I
        9 years ago

        Hi Ina,

         

        Thanks for following up and confirming what seemed to be a crucial difference in our respective SF deployments. I was wondering about this when you indicated that you provided credentials during the connection workflow. I'd been wondering whether a handshake (or the absence of one) with AD might be behind this difference in experience. I will continue to investigate with my SF admin resources and you recommend, and I'll update the thread to close the loop. You've been a great help in ruling out factors and that's provided some great bootstrapping to my troubleshooting process.

         

        Thanks!

         

        Russ