Salesforce Single Sign On (SSO)

Salesforce SSO, Salesforce provisioning; Single sign on; Salesforce single sign on; Elements provisioned user

Ksawery Lisinski avatar
Written by Ksawery Lisinski
Updated over a week ago

Every Salesforce user can be automatically provisioned as a user in Elements if the Managed Package is installed in the target Salesforce Org.

Prerequisites

In order to provision your Salesforce users to Elements you need:

  • A synced Org Model for your Org in Elements

  • A Salesforce Administrator profile in Salesforce

  • Make sure your managed package is on the latest version (at least 5.4)

  • Elements Admin permission set in Salesforce

Logging into the Managed Package

If not already done, you will need to sign into the Elements Settings in Salesforce. First, we recommend you check the "Advanced tab" settings and adjust as follows:

  • If you are using the EU instance, please check you have the following domain settings:

Domain: app.q9elements.com
API Domain: api.q9elements.com

  • If you are using the US instance of Elements, please change the domain settings to reflect the following:

Domain: app.us.elements.cloud
API Domain: api.us.elements.cloud

Provisioning users

Once you are logged in you can follow these steps to provision users.

  1. Go to your list of Apps and choose "Elements".

  2. Open the "Elements Settings" tab

  3. Open the "Connect users (SSO)" sub-tab

You should see the following screen:

From the selected list, you can select the individual users that should have access to Elements:

  • Use the checkbox to select the users

  • Click "Connect users" to provision them to Elements App

The system will create a new Elements user account based on the Salesforce user email. If that email already exists in the system, we will simply connect to that account.

Provisioning using email or Federation ID

Elements supports organisations that use Federation ID to connect their users to external systems. Organisations that prefer to use the Federation ID with a custom domain to connect to Elements are now able to do so effortlessly.

Once you are logged into the Managed Package, follow the steps below to provision users using Federation ID

  • Open the ‘Connect Users (SSO)’ tab

  • Click on the Login Option and select ‘Federation ID’ from the dropdown.

The default Login Option is Email and you can switch the login option to Federation ID to connect users using the Federation ID.

Once the Login Option is switched to Federation ID, a custom field appears where you can add a custom domain for the Federation ID and ‘Save’. From the screenshot below, the Federation Email column is updated with the added custom domain.

Unprovisioning users

In order to take away someone's access from the Elements App:

  • Go to the same screen as explained above

  • Find the users you wish to unprovision and uncheck the checkbox against their account

  • Click "Disconnect users" to commit the operation

Auto-provision new users

At the bottom of the "Connect Users (SSO)" tab, there is an “Assign new Salesforce user to Elements” checkbox.

If turned on, it will give every new user that is added (or signed up!) to your Salesforce Org access to the Elements App.  

Provision by User Profiles

Users can also be provisioned in Elements by their profiles. This will enable users that belong to the profile in consideration to be provisioned in Elements. So, Salesforce Admin does not need to select user by user before provisioning them on Elements. Profile of users can be selected from a list of available profiles and then added to/removed from the list of profiles that will be provisioned/ ignored.

Elements using Salesforce as an Identity provider (SSO)

Once the user has been connected, they can use their Salesforce username and password to log in to the Elements App.

After providing their email on the Elements login screen, they will be taken to the Salesforce login screen - or straight to the app if they are already logged in with Salesforce.

Important: In order to set up Salesforce as an Identity provider for Elements (SSO) continue to this article. This will walk through how to create an auto-login flow to allow automatic sign-in between Elements and Salesforce.

Did this answer your question?