ISVforce Guide

Introduction
ISVforce Quick Start
Designing and Building Your App
Overview of Packages
Components Available in Managed Packages
About API and Dynamic Apex Access in Packages
Architectural Considerations for Group and Professional Editions
Connected Apps Overview
Environment Hub
Set Up the Environment Hub
Setting up My Domain for the Environment Hub
Environment Hub Best Practices
Connecting an Organization to the Environment Hub
Viewing an Environment Hub Member’s Details
Editing an Environment Hub Member’s Details
Creating a New Organization from the Environment Hub
Enabling Single Sign-On in the Environment Hub
Disabling Single Sign-On in the Environment Hub
Mapping Users for Single Sign-On in the Environment Hub
Packaging and Testing Your App
Passing the Security Review
Publish Your Offering on the AppExchange
Managing Orders
Managing Licenses
Provide a Free Trial
Supporting Your Customers
Upgrading Your App
Appendices
Glossary
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Enabling Single Sign-On in the Environment Hub

Available in: Enterprise, Performance, and Unlimited Editions

User Permissions Needed
To set up and configure the Environment Hub: “Manage Environment Hub”

You can enable the Environment Hub and use it to create organizations without using My Domain. However, My Domain deployment is required to enable single sign-on or connect existing organizations to the hub.

Note

To enable single sign-on for an organization:
  1. On the Environment Hub main page, click the name of the organization.
  2. Click Enable SSO on the organization’s detail page.
  3. On the page that displays, click Enable SSO.

You’re taken to the detail page of the organization. Its single sign-on status displays both at the top of the page, and next to the SSO field in the Hub Member Details section.

To match users in the member and hub organizations for single sign-on, you can use any of three methods.
SSO Method Description
Mapped Users Match users in the hub organization to users in a member organization manually. This method is on by default if you’ve defined any SSO user mappings from the member detail page. For details, see Defining a SSO User Mapping.
Federation ID Match users who have the same Federation ID in both organizations. To enable this method, select the checkbox next to it.
User Name Formula Define a custom formula for matching users in the hub and member organizations. This allows you the most flexibility. To enable this method, type a custom formula into the text box provided. For example, the following formula matches the first part of the user name (the part before the “@” sign) with an explicit domain name.

LEFT($User.Username, FIND("@", $User.Username)) & ("mydev.org")

If you specify more than one single sign-on method, they're evaluated in the order of precedence listed above at the time a user tries to log in. The first method that results in a match is used to log the user in, and the other methods are ignored. If no matching user can be identified, you’re directed to the standard salesforce.com login page.

  • If a user mapping has been defined and the user is still unable to use single sign-on, check that the user’s profile has the appropriate permissions enabled. For details, see: Setting up Environment Hub.
  • SSO doesn’t work for newly added users or for SSO user mappings defined in a sandbox organization. Only add users, edit user information, or define SSO user mappings in the parent organization for the sandbox.

Note