[keycloak-user] Salesforce SSO

[Marek Posolda]

A few years ago, I did setup of Picketlink as IDP and Salesforce as SP. 
Some docs is here: 
https://docs.jboss.org/author/display/PLINK/Picketlink+as+IDP,+Salesforce+as+SP 
.

I didn't yet try with Keycloak and I guess the docs may be outdated. But 
hopefully you can use it as a starting point. At least the setup on 
Salesforce side.

AFAIR the Salesforce signs all the messages including SAML requests. So 
for the setup on Keycloak side, you may need to enable flag "Client 
Signature Required" for the SAML client in admin console and then go to 
tab "SAML Keys" and import the certificate from Salesforce. But not sure 
at 100%...

Good luck,
Marek

On 08/12/15 15:42, Ben Bazian wrote:
>
> Sorry for the double post but figured I would try one more time.  Has 
> anyone successfully setup Keycloak as an IDP into Salesforce?  I have 
> it working with OpenID but the way Salesforce implements it is not 
> acceptable.  Would like to use SAML instead.  I am seeing nothing via 
> a web search on this.
>
> Any and all help appreciated.
>
> __________________________
>
> *BEN BAZIAN*
>
> *Director, Information Systems*
>
> MBO Partners
>
> cid:image001.png at 01D057F2.BE72C880
>
> *t*: 703.793.6010
>
> *f*: 703.793.6079
>
> *e*: bbazian at mbopartners.com
>
> *w*: mbopartners.com
>
> Notice: This email and any files transmitted with it are confidential. 
> They are intended solely for the use of the individual addressed.  If 
> you have received this email in error please notify 
> postmaster at mbopartners.com <mailto:postmaster at mbopartners.com> and 
> permanently delete the e-mail and files.
>
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20151208/ad732567/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 5334 bytes
Desc: not available
Url : http://lists.jboss.org/pipermail/keycloak-user/attachments/20151208/ad732567/attachment.png