Salesforce SSO | Axero Documentation

Axero supports Salesforce integration for single sign-on (SSO) out-of-the-box. This page walks you through configuring a Salesforce App, shows you how to enable Salesforce integration, and demonstrates the Salesforce login process.

Salesforce SSO setup is estimated to take 1-2 hours. Once you complete the guide, Salesforce SSO will be active on your intranet. For more information or assistance from the Axero team, submit a private case.

Features

• Join the intranet using a Salesforce account
• Sign in to your intranet with a Salesforce account

Configure Salesforce App

1. In Salesforce, open Setup and go to Apps > App Manager to create an application for your intranet.
2. Click New Connected App.
3. Fill in the following fields:
   • Connected App Name
   • API Name: This field will fill in automatically based on the Connected App Name
   • Contact Email
4. Check Enable OAuth Settings.
5. In the Callback URL field, enter the Salesforce callback URL for your intranet. This is your site URL followed by /oauth2/salesforce/callback.aspx (e.g., https://myintranet.com/oauth2/salesforce/callback.aspx or
   https://myintranet.axero.com/oauth2/salesforce/callback.aspx)
6. Under Available OAuth Scopes, select Access your basic information (id, profile, email, address, phone).
7. Click Add.
8. Click Save.
9. Click Confirm.
10. Copy the Consumer Key and Consumer Secret.

Enable Salesforce Login in Axero

1. Go to Control Panel > System > System Properties and search for salesforce.
2. Edit the following properties:
   • SalesforceClientID: Enter the Consumer Key
   • SalesforceClientSecret: Enter the Consumer Secret
   • SalesforceLoginEnabled: Set to true
   • EnableSecurityProtocolTLS11OrHigher: Set to true
3. Go to System > General Settings .
4. Check Enable 3rd party login.
5. Click Save System Settings.

Login via Salesforce

Enter your login information if necessary.

Set your username.

FAQ

How do I edit an existing app on Salesforce?

In Salesforce, open Setup > Apps > App Manager, find your connected app in the list, and choose Edit from the dropdown at the end of its row.

The next screen will look like this:

Known Issues

Salesforce: TLS 1.1 or Higher

Require TLS 1.1 or higher for HTTPS connections must be activated for Salesforce integration to work properly.

Browsers are no longer a concern here. Every currently supported browser negotiates TLS 1.2 or higher, so no browser-side check is needed.

For more details about the Salesforce TLS 1.1 requirement, visit https://help.salesforce.com/articleView?id=000221207&type=1.

Exception Log: "Stronger security is required"

Set EnableSecurityProtocolTLS11OrHigher in System Properties to true and restart the website from IIS.

A website restart is required because EnableSecurityProtocolTLS11OrHigher comes into effect at the start of the application.

Additional Settings

You can configure the following System Properties to customize aspects of Salesforce SSO integration:

• SaaSLicenseCheckManagerInterval: Sets the interval (in minutes) for the license check background service (Default: 600).
• SalesforceAuthorizationEndPoint: Defines the Salesforce OAuth endpoint for authorization.
• SalesforceRedirectUri: Specifies the callback URL used for Salesforce OAuth integration.
• SalesforceTokenRequestEndPoint: Defines the Salesforce OAuth endpoint for token requests.