Page History

...

1. Sign up as a Salesforce developer.
   1. Fill out the relevant information found in the following URL: https://developer.salesforce.com/signup
      
   2. Click Sign me up.
   3. You will receive a security token by email to confirm your new account. If you did not receive the email successfully, you will be able to reset it by following the steps given here.
2. Log in with your new credentials as a Salesforce developer. Do this by clicking Login link in the top right hand side of https://developer.salesforce.com/.
3. Click Allow to enable Salesforce to access your basic information.
4. Once you are logged in, create a new domain and access it. To do this, do the following steps.
   1. Go to Domain Management in the left navigation pane and click My Domain.
   2. In the page that appears, come up with a name for your domain. You can check if the domain is available by clicking the Check Availability button.
      

   3. Check and agree with the Terms and Conditions before clicking Register Domain to register your new domain.

      Tip
      Tip: The registration process may take some time. Use this time to get familiar with Salesforce and read through the Salesforce developer documentation.

   4. Once the domain is registered to your account, click the Click here to login button to test this out.
5. On the left navigation menu, go to Security Controls and click Single Sign-On Settings.
6. In the page that appears, click Edit and then select the SAML Enabled checkbox to enable federated single sign-on using SAML.
   
7. Click Save to save this configuration change.

8. Click New under SAML Single Sign-On Settings. The following screen appears.
   Ensure that you configure the following properties.

   Field	Value
   Name	SSO
   API Name	SSO
   Issuer	localhost
   Entity Id	http://saml.salesforce.com
   Identity Provider Certificate	wso2.crt Note Note: To create the Identity Provider Certificate, open your Command Line interface, traverse to the <IS_HOME>/repository/resources/security/ directory. Next you must execute the following command. Code Block Keytool -export -alias wso2carbon -file wso2.crt -keystore wso2carbon.jks -storepass wso2carbon Once this command is run, the wso2.crt file is generated and can be found in the <IS_HOME>/repository/resources/security/ directory. Click Choose File and navigate to this location in order to obtain and upload this file.
   Request Signing Certificate	Default Certificate
   Request Signature Method	RSA-SHA1
   Assertion Decryption Certificate	Assertion not encrypted
   SAML Identity Type	Assertion contains User's salesforce.com username
   SAML Identity Location	Identity is in the NameIdentifier element of the Subject statement
   Identity Provider Login URL	https://localhost:9443/samlsso
   Identity Provider Logout URL	https://localhost:9443/samlsso
   Custom Error URL	Leave blank
   Service Provider Initiated Request Binding	HTTP POST
   User Provisioning Enabled	Leave blank

9. Click Save to save your configurations.
10. Go to Domain Management in the left navigation pane and click My Domain.
11. Click Deploy to Users. Click Ok to the confirmation message that appears.
12. In the page that appears, you must configure the Authentication Configuration section. Scroll down to this section and click Edit.
13. Under Authentication Service, select SSO instead of Login Page.
    
14. Click Save.

Configuring the Identity Server

1. Sign in. Enter your username and password to log on to the management console. 
2. Navigate to the Main menu to access the Identity menu. Click Add under Service Providers.
3. Fill in the Service Provider Name and provide a brief Description of the service provider. Only Service Provider Name is a required field and we use Salesforce as the name for this example.
   Image Added 
4. Click Register.
5. Expand the Inbound Authentication Configuration and the SAML2 Web SSO Configuration and click Configure.
6. In the form that appears, fill out the configuration details required for single sign-on.