Single sign-on with Salesforce

This article explains how to set up an SSO connection with Salesforce. This allows you to connect Elfsquad user accounts to Salesforce accounts, so users can log in to Elfsquad with their Salesforce account.

Table of contents

1. Create a connected app in Salesforce
2. Create an identity provider in Elfsquad
3. Enable single sign-on
4. Next steps

1. Create a connected app in Salesforce

First of all, you need to create a new connected app in Salesforce. Elfsquad is going to pair with this app. To create a new connected app, follow these steps:

1. Log in to your Salesforce environment

2. Go to the setup page and look for the app manager

3. Click on 'New Connected App' and fill in the basic information (name, contact email, etc.)

4. Under 'API (Enable OAuth Settings)', check the 'Enable Oauth Settings' checkbox and configure the settings as follows:

• Callback URL: https://login.elfsquad.io/signin-oidc
• Scopes: 'Access unique identifiers (openid)'

5. Click on 'Save' to complete the process

6. Click on 'Manage Consumer Details' and copy the 'Consumer Key' and 'Consumer Secret'. You will need these later on.

2. Create an identity provider in Elfsquad

Elfsquad interfaces with Salesforce through OpenId. This requires adding an identity provider in Elfsquad. You can do this as follows:

1. Open the EMS and go to the integrations page

2. Click on the 'Add new' button and scroll down until you find the 'Identity Provider'. Click on 'Add'

3. Fill in the 'Consumer Key' you've copied previously in the 'Client ID' field

4. Fill in the 'Consumer Secret' you've copied previously in the 'Client Secret' field

5. Enter your Salesforce domain in the 'Authority' field. It should look something like this: https://<yourdomain>.my.salesforce.com

6. Click on 'Add' to complete the process

3. Enable single sign-on

After Elfsquad and Salesforce are linked, Elfsquad accounts can be connected to accounts from Salesforce. This works on a per-account basis and it works as follows:

1. Click on your username (top right) and go to 'Account settings'

2. Scroll down and click on 'Enable SSO' under 'Single sign-on'. A new window will open to sign in to Salesforce. If you were already signed in, your accounts will be connected automatically.

4. Next steps

• Enforcing single sign-on for your users
• Automate provisioning with the SCIM integration