Pricing  Get Quote

Configuring Single Sign-On for Salesforce


Salesforce is considered a behemoth when it comes to cloud apps that help you boost your sales. Most companies worldwide depend on Salesforce CRM to manage all their customers' and partners' information from a single console. Wouldn't it be great if your sales team could have a hassle-free login experience to all the business critical apps in the Salesforce software suite? ADSelfService Plus' single sign-on (SSO) feature does exactly that.

Once you’ve configured SSO for Salesforce in ADSelfService Plus, end users can easily access all their Salesforce apps with just their Active Directory or Windows credentials. Here are the steps to configure SSO for Salesforce.


  1. Make sure the ADSelfService Plus server can be accessed through an HTTPS connection (Access URL must be configured as HTTPS). For detailed steps, click here.
  2. Log in to ADSelfService Plus as an administrator.
  3. Navigate to Configuration → Self-Service → Password Sync/ Single Sign On → Add Application, and select Salesforce from the applications displayed.


    Note: You can also find the Salesforce application you need from the search bar located in the left pane, or the navigation option in the right pane.
  4. Click IdP details in the top-right corner of the screen.
  5. In the pop-up that appears, download the SSO certificate by clicking Download Metadata.


Salesforce configuration steps

  1. Log in to Salesforce with administrator credentials.
    Note: The steps below reference Salesforce Lightning.
  2. Click the Gear icon in the top-right corner.


  3. Navigate to Setup → Settings (from the left panel menu) → Identity → Single Sign-On Settings.
  4. Click Edit.
  5. Select SAML Enabled and click Save.


  6. Click New from Metadata File under SAML Single Sign-On Settings.
  7. Upload the metadata file downloaded in Step 5 of Prerequisites, then click Create.


  8. Modify the Name and API Name with valid names for reference.
  9. Click Save.


  10. Copy the Login URL, which will be your SAML Redirect URL when configuring ADSelfService Plus.
  11. To map SSO login to a particular domain login page:
    • Navigate to Settings (from the left panel menu) > Company Settings > My Domain.
    • Click Edit in the Edit Authentication Configuration of the required domain.
    • Select SSO configuration under Authentication Service.
    • Click Save.

ADSelfService Plus configuration steps:

  1. Now switch to ADSelfService Plus’ Salesforce configuration page.
  2. Enter the Application Name and Description.
  3. Enter the Domain Name of your Salesforce account. For example, if you use to log in to Salesforce, then is the domain name.
  4. Under the Assign Policies field, select the policies for which SSO needs to be enabled.
    Note: ADSelfService Plus allows you to create OU- and group-based policies for your AD domains. To create a policy, go to Configuration → Self-Service → Policy Configuration → Add New Policy.
  5. Select Enable Single Sign-On.
  6. For the SAML Redirect URL field, enter the Login URL you saved in Step 10 of Salesforce configuration steps.
  7. Click Add Application.


    Your users can now sign in to Salesforce through ADSelfService Plus.

ADSelfService Plus also allows users to access their Salesforce accounts from its web console with just a click.


Request Support

Need further assistance? Fill this form, and we'll contact you rightaway.


Password self-service

Free Active Directory users from attending lengthy help desk calls by allowing them to self-service their password resets/ account unlock tasks. Hassle-free password change for Active Directory users with ADSelfService Plus ‘Change Password’ console. 

One identity with Single sign-on

Get seamless one-click access to 100+ cloud applications. With enterprise single sign-on, users can access all their cloud applications with their Active Directory credentials. Thanks to ADSelfService Plus! 

Password/Account Expiry Notification

Intimate Active Directory users of their impending password/account expiry by mailing them these password/account expiry notifications.

Password Synchronizer

Synchronize Windows Active Directory user password/account changes across multiple systems, automatically, including Office 365, G Suite, IBM iSeries and more. 

Password Policy Enforcer

Ensure strong user passwords that resist various hacking threats with ADSelfService Plus by enforcing Active Directory users to adhere to compliant passwords via displaying password complexity requirements.

Directory Self-UpdateCorporate Search

Portal that lets Active Directory users update their latest information and a quick search facility to scout for information about peers by using search keys, like contact number, of the personality being searched.

ADSelfService Plus trusted by

A single pane of glass for complete self service password management