Table of Contents

• Introduction
• Creating the Salesforce SAML Service
• Setting Up the Salesforce 3rd Party Identity Provider
• Completing Service Integration
  • Configuring SAML Service Parameters
  • Setting the Authentication Service in My Domain

Introduction

This document describes the configurations required for SAML 2.0 integration between the Octopus Authenticator and Salesforce web service.

The integration process involves the following sequential stages: 

• Creating the Salesforce SAML Service in the Octopus Management Console
• Setting Up the Salesforce 3^rd Party Identity Provider
• Completing Service Integration

Creating the Salesforce SAML Service

The following procedure explains how to create the required SAML service in the Octopus Management Console. The service settings will be used later when you configure the IdP setup in your Salesforce admin account.

To add and configure the Salesforce SAML service:

    1. From the Octopus Management Console, open the Services menu and click Add Service. In the Generic SAML tile, click Add. 

In the dialog that opens, click Create.

    2. Review and configure the following settings in the General Info tab:

    3. At the bottom of the tab, click Save.

Note: You will set the service parameters (in the Parameters tab) later, after setting up the 3rd party IdP in your Salesforce Admin account

    4. Open the Sign on tab and configure the following settings. It is recommended not to change default settings.

    5. If you updated settings, scroll to the bottom of the Sign on tab and click Save. 

    6. Open the Directories tab and select the checkbox(es) of the directory / directories to be integrated with the service. Then, click Save.

    7. Open the Users tab and click Add. 

A popup opens, with a list of directories displayed on the left. 

    8. Expand the directories list and select the checkboxes of the groups and users that you want to add to the service. Then, click Save to close the popup. 

The groups and users you selected are listed in the Users tab. 

    9. At the bottom of the Users tab, click Save. Then, from the toolbar at the top of the page, click PUBLISH and publish your changes. 

Setting Up the Salesforce 3^rd Party Identity Provider

The procedure below explains how to configure the 3rd party identity provider in your Salesforce Admin account to support integration with Octopus Authenticator.

Before you begin, make sure that you have access to the following elements. They can be copied or downloaded from the Sign on tab of the Salesforce SAML service that you created in the Octopus Management Console.

• Issuer URL: The URL used by the Salesforce service to connect to Octopus Authenticator. Click the Copy icon to copy the URL.
• SAML2.0 Endpoint (HTTP): The Octopus Authenticator Salesforce Login page URL to which the Salesforce service provider will refer users for Octopus authentication. Click the Copy icon to copy the URL.
• SAML Logout URL: The Octopus Authenticator Salesforce service logout redirect URL. Click the Copy icon to copy the URL.
• X.509 Certificate: Click Download to download the cert.pem file.
• SAML METADATA: Click to download the Metadata.xml file.

1. Log into your Salesforce Admin account.
   

    2. From the Home tab, click Setup.

3.

    3. From the Administer pane, expand the Security Controls node and select Single Sign-On Settings.

The Single Sign-On Settings page opens.

    4. At the top of the page, click New from Metadata File.

Then click Choose File, upload the metadata.xml file that you downloaded earlier from the Salesforce SAML service, and click Create.

    5. On the page that opens, configure the following settings:

6. At the bottom of the page, click Save.

Completing Service Integration

In the final phase of the integration, you will complete the parameters of the SAML service in the Octopus Management Console and then set the service in My Domain of Salesforce.

Configuring SAML Service Parameters

Completion of the service settings involves copying some data from your Salesforce sign-on settings into the parameters of the SAML 2.0 service you created in the Octopus Management Console. The parameters you need to copy are shown in the following figure.

To complete service integration: 

1. Log into the Octopus Management Console and open the Services menu.
2. In the tile or row of the Salesforce SAML service, click  to display the service settings.

      3. Open the Parameters tab and set the following parameters: 

4. At the bottom of the Parameters tab, click Save. Then, from the toolbar at the top of the page, click PUBLISH and publish your changes.

Setting the Authentication Service in My Domain

The last process in the integration is setting the service in the authentication configuration of My Domain in Salesforce.

To set the authentication service:

1. From Domain Management, select My Domain.
2. Under Authentication Configuration, click Edit.
3. Select the relevant SAML service and click Save.

Test Login Authentication with SSO

Test