How To Change Domain Name In Salesforce

Salesforce FedID

Before You Get

Introduction

This papers describes how to configure Oracle Identity Cloud Avail to provide Single Sign-On (SSO) for Salesforce using SAML.

Astir Salesforce

Salesforce is a Software-as-a-Serve (SaaS) solution shapely on the power of App Haze over, so users can run their business on any device, easily build new client apps, or integrate with present back place systems. IT provides companies with an user interface for display case management and task direction, and a system for automatically routing and escalating important events. Salesforce comprises Salesforce Application, Salesforce Work.com, and Salesforce Chatter for collaboration.

Later integration Salesforce with Oracle Identity Cloud Service:

Users can access Salesforce using their Seer Identity Cloud Serving login credentials.
Users stool start Salesforce from Oracle Identity Cloud Service My Apps console.
Admins can assign and revoke user access to the Salesforce app using the Seer Identity Cloud Divine service organization console.

What Do You Need?

An Oracle Identity Cloud Service account with authorization rights to grapple apps and users (Identity Domain Administrator or Application Decision maker).
A Salesforce account with authorization rights to configure federated authentication.
Make a point that the email ID of each user in Salesforce matches the primary email ID of the Oracle Identity Cloud Service account.
A downloaded Identity Provider metadata file. Use of goods and services the following URL to access the metadata: https://<IDCS-Divine service-Representativ>.identity.oraclecloud.com/federal official/v1/metadata. Use this file later during the Salesforce configuration in the "Configuring SSO for Salesforce" segment.

Configuring SSO for Salesforce

Use this section to piece the domain, erect the Federation ID for the Salesforce user, and configure SSO for Salesforce.

Setting Up the Domain in Salesforce

Access Salesforce as an decision maker exploitation the URL: https://login.salesforce.com.
Click Frame-up.
From the left sailing menu, expand Region Management in the Parcel out section, then select My Domain. The My Arena pageboy appears.
In the Choose Your Domain section, enroll the Area Name, and then click Check Availability.
If the domain name is available, click Register Domain.
Afterward registering the domain, Salesforce sends you an e-mail. Click the link in the email to set off the Salesforce-created domain.
Log in with your domain URL to test and deploy the domain.

Scene Finished the Federation ID for the Salesforce User

Access Salesforce as an administrator using the Uniform resource locator: https://login.salesforce.com.
Click Setup.
From the left piloting menu, expand Make do Users in the Administer section, and then select Users.
Click the Blue-pencil liaison next to the administrator user name. The User Delete window appears.
In the Single Sign up Information section, enter or paste the user's email ID into the Federation ID text boxwood, and so click Save.

Configuring SSO for Salesforce

Entree Salesforce as an administrator exploitation the URL: https://login.salesforce.com.
Click Setup.
From the near navigation menu, expand Security Controls in the Administer section, and then select Single Sign-Connected Settings.
Along the Single Sign-Happening Settings page, tick Edit.
In the Federated Single Sign-Connected Victimization SAML section, select the SAML Enabled check box, and then click Save.
In the SAML Single Sign-On Settings section, snap Spic-and-span from Metadata File.
Click Choose File, and then upload the metadata that you previously downloaded. See the "What Brawl You Need" section.
Click Create.

Use the table to update the united authentication attributes, and then click Save.

This table lists the mandatory federated authentication attributes that you must set to complete the SSO configuration.
Assign	Value
Name	Move in the identicalness provider name.
API Gens	Enter a epithet for the API.
SAML Identity Type	Make sure that Asseveration contains the Federation ID from the Substance abuser object is designated.

Configuring the Salesforce App in Oracle Identity Cloud Service

Use this section to obtain the Organization ID and Arena Name, read and set off the Salesforce app, and then allot users to the app.

Obtaining the Organization ID and Domain Name from Salesforce

An organization ID and a realm name are needful before you can register and activate the Salesforce app. You obtain these values from Salesforce.

From the Salesforce homepage, select Setup.
From the left navigation menu, expand Security Controls in the Administer plane section, then select Single Communicative-On Settings. The Single Sign-On Settings foliate appears.
In the SAML Single Bless-On Settings section, click the name that you provided for your SAML Single Sign-On Settings. The SAML configuration page appears.
In the Endpoints section, copy the domain name and the organisation I.D. from the Salesforce Login URL: https://<Domain_Name>.my.salesforce.com?so=<Organization_ID>. The domain name appears at the showtime and the organization ID appears at the end of the URL.

Registering and Causative the Salesforce App

Accession the Oracle Identicalness Cloud Service of process administration console, select Applications, then click Sum.
Click App Catalog.
Seek for Salesforce, and then sink in Add.
In the App Details section, enter the Salesforce Organization ID and Domain Name, and then penetrate Next.

Note: These are the values that you obtained while playacting the steps in the previous section.
Chatter Ending. Oracle Identity Cloud Service displays a confirmation message.
Click Activate, and past click Activate Application. Oracle Identity element Cloud Service displays a confirmation message.

Assigning Users to the Salesforce App

On the Salesforce app page in Oracle Identity Cloud Service, superior Users, and so sink in Attribute. The Assign Users window appears.
Select users that you want to specify to Salesforce, and then clink OK. Oracle Identity Cloud Service displays a confirmation substance stating that the Salesforce app is assigned to the users that you selected.

Verifying the Integration

Use this section to avow that SSO works when initiated from Oracle Identity Cloud Service (IdP initiated SSO) and Salesforce (SP initiated SSO).

Supportive Indistinguishability Supplier Initiated SSO from Oracle Identity operator Cloud Service

Access the Oracle Identity Cloud Service My Profile console using the URL: https://<IDCS-Service-Instance>.identity.oraclecloud.com/ui/v1/myconsole.
Log in using credentials for a drug user that is appointed to the Salesforce app. Oracle Identity Cloud over Service displays a shortcut to Salesforce low-level (Salesforce Lotion, Salesforce Chatter, and Salesforce Work.com) My Apps.
Click Salesforce Application. The Salesforce homepage appears.
Locate the exploiter name at the top of the page to confirm that the user that is logged in is the same for both Salesforce and Oracle Personal identity Cloud Service.
Repeat step 3 for the Salesforce Chatter app and the Salesforce Work.com app.

This confirms that SSO that is initiated from Prophet Identity Cloud Serving works.

Verifying Service Provider Initiated SSO from Salesforce

Access Salesforce victimization the URL: https://login.salesforce.com.
Connected the login page, click Use Custom-built Domain, and so click the identity operator provider name. You are redirected to the Prophesier Identity element Defile Service login page.
Log on using credentials for a user that is assigned to the Salesforce app. The Salesforce homepage appears.
Locate the drug user name at the tipto of the page to corroborate that the user that is logged in is the duplicate for both Salesforce and Prophet Identity Fog Service of process.

This confirms that SSO that is initiated from Salesforce works.

Troubleshooting

Use this section to locate solutions to common integrating issues.

Known Issues

Salesforce displays the message, "Single Sign-Along Error".

Effort: The electronic mail attribute sent away Oracle Identity Sully Service during SSO doesn't match any existing user in Salesforce.

Solution: Ensure that the user that you assign to the Salesforce app has an score in some Prophesier Personal identity Taint Service and Salesforce with the same e-mail call.

Vaticinator Identity Cloud Avail displays the substance, "You are not authorized to access the app. Impinging your system administrator."

Cause 1: The SAML 2.0 desegregation between the Prophesier Identicalness Cloud Service Salesforce app and Salesforce is deactivated.

Root 1:

Access the Oracle Identity operator Cloud Service disposal console, prime Applications, and then superior Salesforce.
In the App Details section, click Activate, and then click Activate Application. Oracle Individuality Mottle Service displays a confirmation substance.

Effort 2: The administrator revokes access for the user at the same time that the user tries to access the Salesforce app victimisation Oracle Indistinguishability Cloud Service.

Solution 2:

Entree the Oracle Identity Cloud Service establishment console, select Applications, and then select Salesforce.
In the App Details section, select Users, then clink Allot to re-designate the user.

Nameless Issues

For unknown issues, contact Oracle Support:

Go to https://indorse.oracle.com.
Select Cloud Support, so sign in with your backup certificate.
In the Cloud Dashboard, confirm that there are no planned outages in Oracle Identity Cloud Avail, so click Create Service of process Request.
Superior Seer Personal identity Cloud Military service as the service type.
Complete your service call for.