Question

Which are appropriate license type choices for sales and marketing users, giving salesforce is using Delegated Authentication?

Sales users at Universal containers use salesforce for Opportunity management.

Marketing uses a third-party application called NEST for Lead nurturing that is accessed using username/password.

The VP of sales wants to open up access to NEST for all sales uses to provide them access to lead history and would like SSO for better adoption.

Salesforce is already set up for SSO and uses Delegated Authentication.

NEST can accept username/Password or SAML-based Authentication.

IT teams have received multiple password-related issues for the NEST and have decided to set up SSO access for NEST for marketing users as well.

The CIO does not want to invest in a new IDP solution and is considering using Salesforce for this purpose.

Answer 1

Answer:

Salesforce is already set up for SSO and uses Delegated Authentication.

Explanation:

Salesforce uses this process to authenticate users with delegated authentication SSO.

When a user tries to log in, Salesforce validates the username and checks the user’s permissions and access settings.

If the user has the Is Single Sign-On Enabled user permission, Salesforce doesn’t validate the username and password. Instead, a web service call is made to the user’s org to validate the username and password. When this user permission is enabled, Salesforce no longer manages the policies for user passwords, such as when passwords expire or the required minimum length. Instead, the delegated authentication endpoint’s service enforces password policies.

The web service call passes the username, password, and source IP to your web service.The source IP is the address where the login request originated. You must create and deploy an implementation of the web service that Salesforce servers can access.

Your web service implementation validates the information passed and returns either true or false.

If true, the login process continues, a new session is generated, and the user proceeds to the app. When false, the user gets an error message that the username and password combination is not valid.