The Own Data Platform supports Single Sign-On using SAML 2.0. You can set your own authentication using your managed Identity Provider instead of using local authentication for password and security policies.
Own uses SAML 2.0, so to authenticate, the Identity Provider must allow the SAML Assertion to be used. Create an SSO application in your IdP provider before enabling SSO in the platform.
SSO Settings Access
SSO settings are only accessible to Master Admin and Admin users, and not visible to non-admin users. For Admin users, it is read-only, while the Master Admin users can make changes.
SSO Settings Impact
Changes to SSO settings affect all the regions in the account. Therefore, any Master Admin can make changes, no matter what region they're the Master Admin of. We recommend having a single Master Admin user across all regions in the account.
IdP Application Connection
Only one application in the IdP can connect to the Own Data Platform, even if you have multiple regions.
- Enable Single Sign-On
Own from Salesforce supports single sign on using SAML 2.0. Instead of relying on local authentication for password and security policies, you can set your own authentication using your managed Identity Provider. - Enable Asserted Encryption with SSO
In order to meet FAL2 requirements, your IdP may need to sign assertions it generates. Find the variables you need to enter in your IdP to enable encrypted assertion. - Migrate SSO Users to Own Data Platform
Own is launching a new Data Platform. If you access our applications with Single Sign On through your chosen Identity Provider, make sure your organization has made the necessary updates to continue benefiting from our improved platform security. For SSO users migrating to the Own Data Platform, it's important to configure your Identity Provider (IdP) by December 15th to verify access. After this date, access to the regional login URL will no longer be available. - Create a Connected App for SSO in Salesforce
To use Salesforce as your identity provider while using single sign on, configure the correct settings for your app integration. - Create an App Integration for SSO in Okta
To use Okta as your identity provider while using single-sign on, configure the correct settings for your app integration. - Create an Application for SSO in Azure
To use Azure as your identity provider while using single sign-on, configure the correct settings for your app integration. - Create a SAML App for SSO in Google Workspace
To use Google as your identity provider while using single sign-on, configure the correct settings for your app integration. - Create an SSO Application in Ping
To use Ping as your identity provider while using single sign-on, configure the correct settings for your app integration.