Salesforce SSO | Axero Documentation

Axero supports Salesforce integration for single sign-on (SSO) out-of-the-box. This page walks you through configuring a Salesforce App, shows you how to enable Salesforce integration, and demonstrates the Salesforce login process.

Salesforce SSO setup is estimated to take 1-2 hours. Once you complete the guide, Salesforce SSO will be active on your intranet. For more information or assistance from the Axero team, submit a private case.

Features

• Join the intranet using a Salesforce account
• Log in to your intranet using Salesforce authentication

Configure Salesforce App

1. Visit the Salesforce App Manager to create an application for your intranet.
2. Click New Connected App.
3. Fill in the following fields:
   • Connected App Name
   • API Name: This field will fill in automatically based on the Connected App Name
   • Contact Email
4. Check Enable OAuth Settings.
5. In the Callback URL field, enter the Salesforce callback URL for your intranet. This is your site URL followed by /oauth2/salesforce/callback.aspx  (e.g., https://myintranet.com/oauth2/salesforce/callback.aspx or
   https://myintranet.axero.com/oauth2/salesforce/callback.aspx)
6. Under Available OAuth Scopes, select Access your basic information (id, profile, email, address, phone).
7. Click Add.
8. Click Save.
9. Click Confirm.
10. Copy the Consumer Key and Consumer Secret.

Enable Salesforce Login in Axero

1. Go to Control Panel > System > System Properties and search for salesforce.
2. Edit the following properties:
   • SalesforceClientID: Enter the Consumer Key
   • SalesforceClientSecret: Enter the Consumer Secret
   • SalesforceLoginEnabled: Set to true
   • EnableSecurityProtocolTLS11OrHigher: Set to true
3. Go to System > General Settings .
4. Check Enable 3rd party login.
5. Click Save System Settings.

Login via Salesforce

Enter your login information if necessary.

Set your username.

FAQ

How do I edit an existing app on Salesforce?

Go to https://na59.salesforce.com/02u and click the "Edit" link.

The next screen will look like this:

Known Issues

Salesforce: TLS 1.1 or Higher

Require TLS 1.1 or higher for HTTPS connections must be activated for Salesforce integration to work properly.

Your browser must also support TLS 1.1 version. To test whether your browser supports TLS 1.1, visit https://tls1test.salesforce.com/s/. If you see the following screen, then your browser supports TLS 1.1.

For more details about the Salesforce TLS 1.1 requirement, visit https://help.salesforce.com/articleView?id=000221207&type=1.

Exception Log: "Stronger security is required"

Set EnableSecurityProtocolTLS11OrHigher in System Properties to true and restart the website from IIS.

A website restart is required because EnableSecurityProtocolTLS11OrHigher comes into effect at the start of the application.

Additional Settings

You can configure the following System Properties to customize aspects of Salesforce SSO integration:

• SaaSLicenseCheckManagerInterval: Sets the interval (in minutes) for the license check background service (Default: 600).
• SalesforceAuthorizationEndPoint: Defines the Salesforce OAuth endpoint for authorization.
• SalesforceRedirectUri: Specifies the callback URL used for Salesforce OAuth integration.
• SalesforceTokenRequestEndPoint: Defines the Salesforce OAuth endpoint for token requests.