Versions Compared

Old Version 8

changes.mady.by.user Jay-Ar Brouillard

Saved on

compared with

New Version 9

changes.mady.by.user Jay-Ar Brouillard

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Determine which certificate you want to use to enable your org to communicate with the service provider. You can use the default certificate or create your own. See Certificates and Keys.

    • By default, a Salesforce identity provider uses a self-signed certificate generated with the SHA-256 signature algorithm. If you want to use the default certificate, proceed to step 2.

    • To create a new self-signed certificate, follow the instructions in Generate a Self-Signed Certificate. These instructions will be using a self-signed certificate.

    • To create a CA-signed certificate, follow the instructions in Generate a Certificate Signed by a Certificate Authority

  2. From Setup, in the Quick Find box, enter Identity Provider, then select Identity Provider.

  3. Click Enable Identity Provider.

  4. Select a certificate from the dropdown menu.

  5. Save your changes.

  6. Click Download Certificate. This is typically .crt file. FlexDeploy will use the certificate to connect to Salesforce.

    Image Removed

  7. Copy the URL of Salesforce Identity (SF_METADATA_URL) as this will be used to connect to Salesforce.

...

2. Integrate FlexDeploy as a SAML-enabled connected app

...

  1. Under Profiles or Permission Sets, add the profiles or permissions sets of the users who can access this connected app Click Manage on your connected app and grab the Metadata Discovery Endpoint (SF_METADATA_URL). This will be needed to connect to FlexDeploy.

...

3. Import SSO Certificate from Salesforce into FlexDeploy keystore

...

  • FLEXDEPLOY_HOME - Directory on the server where FlexDeploy is installed

  • KEYSTORE_PASSWORD - The Java key store password.

  • PRIVATE_KEY_PASSWORD -The private key password.

  • SF_METADATA_URL - The Metadata URL (from Salesforce) to the identity provider metadata (e.g. https://flexagon9-dev-ed.my.salesforce.com/.well-known/samlidp/flexdeploy.xml).

  • FLEXDEPLOY_HOST - FlexDeploy application host

  • FLEXDEPLOY_PORT - FlexDeploy application port

  • ENTITY_ID - The Entity Id found in the connected app (e.g https://app-poc-e15b5cfc83cc.azurewebsites.net/flexdeploy/callback?client_name=SAML2Client).

  • PATH_TO_YOUR_KEYSTORE_FILE - The path to the keystore, including the file name and extension.

...