Salesforce Fact #904 | Allow user to login only using SSO

How to ensure that users can login using SSO only?

First we need to enable the 'Disable login with Salesforce credentials' checkbox under Single Sign-on settings in setup -> Create a PS with the system permission 'Is Single Sign-On Enabled' checked -> Assign this PS to the intended users.

Now, the users can login only using SSO, and not using username/password. Failed login attempts are shown as 'The Single Sign-On Gateway Url is invalid' in login history.

Note: We should not assign this PS to admin users as they should always have option to login via username/password option to review any system issue on urgent basis.

Reference: https://help.salesforce.com/s/articleView?id=sf.sso_enforce_sso_login.htm&type=5

Comments

Post a Comment

Popular posts from this blog

Salesforce Fact #192 | Call batch apex from flow

Image
Generally apex batch jobs are scheduled to run at particular time intervals. But suppose we have a use case where we need to run the batch job on adhoc basis. We can call the batch apex from a screen flow in that case and the screen flow can be invoked from a button. So, the batch job can be executed on demand. Attached are the screenshots.
Read more

Salesforce Fact #457 | Get current user role name in flow

Image
In apex, in order to get the current user role name we need to query the UserRole object. We cannot get it directly using UserInfo object since it has only one method related to role i.e  getUserRoleId(). Using this Id returned we can get the data from UserRole object. But that is not that complex in flow. In case of flow, we can directly get the current user role name using the syntax: {!$UserRole.Name}. Attached are the screenshots.
Read more