SSO with Salesforce

Introduction

In this article we'll list the steps of how you can set up SSO with Salesforce. You can learn more details about SSO from our main article.

Steps

You can create your developer account in Salesforce and follow this article. Alternatively:

1. Find App Manager in Search (should be on the Setup page)
   
   
   
   
2. Create a new Connected App and set:

   • Name

   • Email

   • Enable Oauth Settings

     • Callback URL is the Return URL from our integration (can be copied when you activate the Authentication Integration in OfficeRnD)

     • Selected OAuth Scopes

       • OpenId

       • Email and profile info
         
         

       • Set Configure ID Token and choose Include Standart Claims - more info.
         
         
         
         

       • Copy the Consumer Key and Consumer Secret from the Connected App and paste it into the configuration in OfficeRnD:
         
         

3. The Discovery URL can be found here - https://help.salesforce.com/articleView?id=remoteaccess_oauth_endpoints.htm&type=5
4. (Optional) Enable Account Activation in OfficeRnD. With this setting enabled, employees who already exist in OfficeRnD Flex will be allowed to log into the Portal without invitations. If this setting is disabled, employees without prior access to the Portal must have it enabled by an administrator.
5. Turn Off Password Login - This setting enforces SSO login and prevents members from logging in with email and password. If it's left unchecked, members will have the option to use SSO or a normal email/password login.
   Enabling Turn Off Password Login of the SSO for Member Tools disables:
   - The standard login with OfficeRnD user and password
   - The Public Calendar Page and Sign-up Page
   - Reset password links
   - Token for auth in the invite to portal email (Welcome email)