Link to home
Start Free TrialLog in
Avatar of deanwilsons
deanwilsonsFlag for United Kingdom of Great Britain and Northern Ireland

asked on

SSO for Servicenow and Salesforce

We are looking to put in both Service Now and Salesforce (SFDC), and need a SSO solution that fits in with both of those, and AD.

I have been looking at ADFS for SAML for SN and SFDC as we already have that setup for our intranet, but was wondering how it works in real life, and how much work is involved in using our existing ADFS setup?

i wasn't involved in the setup of the current ADFS, and have no wish to break it.

Thanks

Phil
Avatar of Rahul Gade
Rahul Gade
Flag of India image

You need ADFD2.0 endpoint configured and exposed to external world.
The process on ADFS2.0 side will not take more than 10-20min of configuration and Salesforce configuration and testing would include 4-8 of hours, unless you JIT (Just in Time need or custom attribute mapping need). For testing purpose you can also using simulated version of ADFS https://axiomsso.herokuapp.com/Home.action before actual configuration.

Choose any good field like email address or userid as federation id and make sure that it is present and configured on user object in Salesforce, now when you provide the SSO endpoint URL and follow few quick steps you should be done.
There are two type of flows that you can implement:
- SP Initiated : It is necessary in case of SP initiated flow to have mydomain configured, which helps your IdP to uniquely identify your SFDC login page.
- IdP initiated flow : you can generate a URL and place it in your intranet portal for login, so that this URL will first go to IdP and then login into SFDC.
You probably need following resource to follow the step by step guide.
http://resources.docs.salesforce.com/206/latest/en-us/sfdc/pdf/salesforce_single_sign_on.pdf
This question needs an answer!
Become an EE member today
7 DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.