{"id":809,"date":"2026-07-14T09:00:00","date_gmt":"2026-07-14T03:30:00","guid":{"rendered":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/"},"modified":"2026-07-14T09:00:00","modified_gmt":"2026-07-14T03:30:00","slug":"salesforce-single-sign-on-my-domain","status":"publish","type":"post","link":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/","title":{"rendered":"Salesforce Single Sign-On and My Domain"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Salesforce Single Sign-On lets users log in to Salesforce with the same company account they already use for email and other apps, so they do not need a separate Salesforce password. It works through My Domain, the unique login address of your org. In our <a href=\"https:\/\/swapnilzambare.com\/blog\/salesforce-org-security-mfa-login\/\">org security guide<\/a>, you set up MFA and password policies. In our <a href=\"https:\/\/swapnilzambare.com\/blog\/salesforce-user-management-guide\/\">user management guide<\/a>, you created users. SSO changes how those users sign in.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In this post, you will learn what My Domain is, how SAML single sign-on works, what an identity provider does, how Federation IDs link users, and how social sign-on differs. Then you will plan SSO for Bright Path Tutors with the company&#8217;s Microsoft or Google account. The Platform Administrator II exam asks about user authentication, so the ideas here matter for the exam as well.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What is Salesforce Single Sign-On?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Single sign-on, or SSO, means one login for many apps. The user signs in once with an identity provider, such as Microsoft Entra ID, Okta or Google Workspace. Then Salesforce trusts that sign-in and opens without asking for a Salesforce password.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">My Domain is your org&#8217;s own login address, like brightpath.my.salesforce.com. Every org has one, and SSO buttons appear on that login page.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here is a simple analogy. Think of an office building with one ID card. You tap the card at the main gate, and the same card opens the lift and your office floor. You do not carry a different key for each door. The identity provider is the main gate, and Salesforce is one of the doors that trusts the card.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why Salesforce Single Sign-On Matters<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Many passwords lead to weak passwords, sticky notes and reset requests. They also make it hard to remove access when someone leaves. For example, a trainer who leaves may still know their Salesforce password, even after IT has closed their email account. With SSO, closing the company account closes Salesforce access too, because every login passes through the same gate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here are some real situations at Bright Path Tutors.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Staff already log in to email with company Microsoft accounts.<\/li>\n\n<li>IT wants one place to switch off access when a trainer leaves.<\/li>\n\n<li>Users forget their Salesforce password every few weeks.<\/li>\n\n<li>The security team wants MFA enforced in one place for every app.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">So SSO improves security and saves time for both users and admins.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How Salesforce Single Sign-On Works<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A SAML login follows a clear sequence. First, the user opens the My Domain login page and clicks the company login button. Next, Salesforce sends the user to the identity provider. Then the user signs in there, with MFA if required. After that, the identity provider sends a signed message, called a SAML assertion, back to Salesforce. Finally, Salesforce checks the signature, finds the user by Federation ID, and logs them in.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><a href=\"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-1.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"640\" src=\"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-1-1024x640.png\" alt=\"Salesforce Single Sign-On diagram showing a login from My Domain through the identity provider\" class=\"wp-image-777\" srcset=\"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-1-1024x640.png 1024w, https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-1-300x188.png 300w, https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-1-768x480.png 768w, https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-1-1536x960.png 1536w, https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-1-2048x1280.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption class=\"wp-element-caption\">How Salesforce Single Sign-On works: the user starts at My Domain, signs in at the identity provider, and Salesforce trusts the signed SAML message.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Salesforce never sees the user&#8217;s company password. Instead, it only trusts the signed message from the identity provider. So even if someone copies the message, they cannot change it, because the signature would no longer match the certificate.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Key Parts of Salesforce Single Sign-On<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">My Domain<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">First, My Domain gives your org a branded login URL. Also, it is required for every org today. The Authentication Configuration section of My Domain decides which login options appear on the page.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Identity provider and service provider<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Next, the identity provider checks who the user is. Meanwhile, Salesforce acts as the service provider, which trusts the identity provider. Salesforce can also be an identity provider for other apps, but that is a different setup.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">SAML settings for single sign-on<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Then the SAML single sign-on settings in Setup hold the identity provider&#8217;s details. These include the issuer, the certificate that signs messages, and the login URL.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Federation ID in single sign-on<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Each user record has a Federation ID field. It holds the value that the identity provider sends, often the work email. Then that value links the incoming login to the right Salesforce user. However, the value must match exactly, so a typo or an old email address blocks the login.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Social sign-on and Just-in-Time provisioning<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Finally, authentication providers let users log in with accounts like Google or Microsoft through OpenID Connect. Just-in-Time provisioning can create or update users automatically during login. For example, when a new trainer logs in for the first time, Salesforce can create their user with the right profile and role from the details in the SAML message. This saves admin time, but test it carefully, because a wrong mapping can give the wrong access.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The table below lists the SAML settings we will enter.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Setting<\/th><th>Example value<\/th><\/tr><\/thead><tbody><tr><td>Name<\/td><td>Bright Path Microsoft SSO<\/td><\/tr><tr><td>Issuer<\/td><td>Identity provider&#8217;s entity ID<\/td><\/tr><tr><td>Identity Provider Certificate<\/td><td>Uploaded certificate file<\/td><\/tr><tr><td>SAML Identity Type<\/td><td>Federation ID<\/td><\/tr><tr><td>Identity Provider Login URL<\/td><td>Provider&#8217;s sign-in address<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">SAML SSO vs Social Sign-On<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Both remove the separate Salesforce password, but they suit different users. The table below compares them.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Feature<\/th><th>SAML single sign-on<\/th><th>Social sign-on<\/th><\/tr><\/thead><tbody><tr><td>Typical users<\/td><td>Employees<\/td><td>Customers and partners<\/td><\/tr><tr><td>Identity source<\/td><td>Company identity provider<\/td><td>Google, Microsoft, Facebook and others<\/td><\/tr><tr><td>Setup in Salesforce<\/td><td>SAML settings<\/td><td>Authentication provider<\/td><\/tr><tr><td>User matching<\/td><td>Federation ID<\/td><td>Registration handler or linked accounts<\/td><\/tr><tr><td>Best for<\/td><td>Staff using company accounts<\/td><td>Public sites like customer portals<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">In short, use SAML for employees with company accounts. Use social sign-on for customers who want to log in to a site with an account they already have.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><a href=\"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-2.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"640\" src=\"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-2-1024x640.png\" alt=\"Salesforce Single Sign-On diagram comparing SAML single sign-on with social sign-on\" class=\"wp-image-778\" srcset=\"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-2-1024x640.png 1024w, https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-2-300x188.png 300w, https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-2-768x480.png 768w, https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-2-1536x960.png 1536w, https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-diagram-2-2048x1280.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption class=\"wp-element-caption\">SAML single sign-on compared with social sign-on, and when to use each one.<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Hands-on Example: Salesforce Single Sign-On with a Company Account<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Let&#8217;s plan SSO in a sandbox first. You need admin access to your identity provider as well as Salesforce.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1: Check My Domain<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Go to Setup, type &#8220;My Domain&#8221; in Quick Find, and note your login URL.<\/li>\n\n<li>Keep the standard login form available for admins as a backup, so you can still log in if the identity provider has an outage.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2: Add Salesforce to the identity provider<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>In the identity provider, create a new SAML app for Salesforce.<\/li>\n\n<li>Enter your My Domain URL details and choose to send the work email as the user identifier.<\/li>\n\n<li>Download the provider&#8217;s metadata or certificate.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3: Create the SAML settings in Salesforce<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>In Quick Find, open Single Sign-On Settings and click New from Metadata File, or New.<\/li>\n\n<li>Enter the values from the table above and save.<\/li>\n\n<li>Open My Domain, edit Authentication Configuration, and tick the new SSO option.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Step 4: Set Federation IDs<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Set each user&#8217;s Federation ID to their work email. Developers can check which users are ready with this query.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SELECT Username, FederationIdentifier, IsActive\nFROM User\nWHERE IsActive = true AND FederationIdentifier = null<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Any user in the result cannot log in with SSO yet. So fill their Federation ID before go-live, either by hand for a few users or with Data Loader for many.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 5: Test and monitor<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Log in as a test user through the company login button.<\/li>\n\n<li>Check Login History in Setup. The login type should show SAML single sign-on, not the standard application login.<\/li>\n<\/ol>\n\n\n\n<pre class=\"wp-block-code\"><code>SELECT UserId, LoginType, Status, LoginTime\nFROM LoginHistory\nWHERE LoginTime = TODAY\nORDER BY LoginTime DESC<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">LoginType shows how each user logged in. So you can confirm that SSO is working before you tell the whole company.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Common Mistakes with Salesforce Single Sign-On<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>No backup admin login.<\/strong> If SSO fails, admins must still get in with a password.<\/li>\n\n<li><strong>Missing Federation IDs.<\/strong> Users see an error after a successful provider login.<\/li>\n\n<li><strong>Expired certificates.<\/strong> Logins stop on the expiry date, so track it in your team calendar.<\/li>\n\n<li><strong>Testing in production first.<\/strong> Always test SSO in a sandbox.<\/li>\n\n<li><strong>Forgetting MFA.<\/strong> Make sure the identity provider enforces MFA.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Best Practices for Salesforce Single Sign-On<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Use the work email as the Federation ID.<\/strong> It is unique and easy to match.<\/li>\n\n<li><strong>Keep one or two break-glass admins.<\/strong> They log in with a password and MFA.<\/li>\n\n<li><strong>Enforce MFA at the identity provider.<\/strong> One rule protects every app.<\/li>\n\n<li><strong>Turn off users in one place.<\/strong> Disable the company account when someone leaves, then freeze the Salesforce user too.<\/li>\n\n<li><strong>Review Login History after go-live.<\/strong> Look for failed SSO attempts.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Practice Task<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Set up a social sign-on test for an Experience Cloud site with a Google authentication provider. Then log in to the site as a test parent.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Hint: create the authentication provider first, then add it to the site&#8217;s login page settings.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Salesforce Single Sign-On FAQ<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Is My Domain required?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Yes. Every org has a My Domain, and SSO options appear on its login page.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Does SSO replace MFA?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">No. SSO moves login to the identity provider, which should enforce MFA.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Can some users keep passwords?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Yes. You can allow both login options and choose who uses which.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Official Resources<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/help.salesforce.com\/s\/articleView?id=sf.admin_password.htm&amp;type=5\" target=\"_blank\" rel=\"noopener noreferrer\">Password Policies (Salesforce Help)<\/a><\/li>\n\n<li><a href=\"https:\/\/help.salesforce.com\/s\/articleView?id=sf.admin_users.htm&amp;type=5\" target=\"_blank\" rel=\"noopener noreferrer\">Manage Users (Salesforce Help)<\/a><\/li>\n\n<li><a href=\"https:\/\/trailhead.salesforce.com\/content\/learn\/modules\/lex_implementation_user_setup_mgmt\" target=\"_blank\" rel=\"noopener noreferrer\">User Management (Trailhead)<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Quick Recap<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Salesforce Single Sign-On lets users log in with their company account.<\/li>\n\n<li>My Domain is the login address where SSO buttons appear.<\/li>\n\n<li>SAML assertions from the identity provider prove who the user is.<\/li>\n\n<li>Federation IDs link the login to the right Salesforce user.<\/li>\n\n<li>Keep a backup admin login and enforce MFA at the provider.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What&#8217;s Next?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Your users now log in safely with one account. Next, learn how outside apps connect to Salesforce through External Client Apps. Read <a href=\"https:\/\/swapnilzambare.com\/blog\/salesforce-external-client-apps\/\">Salesforce External Client Apps and Connected Apps<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Salesforce Single Sign-On lets users log in to Salesforce with the same company account they already use for email and other apps, so they&hellip;<\/p>\n","protected":false},"author":1,"featured_media":779,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_swapz_level":"","_swapz_series_part":0,"_swapz_hide_toc":false,"_swapz_hide_featured":false,"_swapz_description":"","footnotes":""},"categories":[67,8,13],"tags":[68,7,17,76],"swapz_series":[],"class_list":["post-809","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-advanced-admin","category-salesforce","category-salesforce-admin","tag-advanced","tag-salesforce","tag-security","tag-users"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Salesforce Single Sign-On and My Domain Guide<\/title>\n<meta name=\"description\" content=\"Salesforce Single Sign-On explained: My Domain, SAML, identity providers, Federation IDs and social sign-on, with a hands-on company login example.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Salesforce Single Sign-On and My Domain Guide\" \/>\n<meta property=\"og:description\" content=\"Salesforce Single Sign-On explained: My Domain, SAML, identity providers, Federation IDs and social sign-on, with a hands-on company login example.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/\" \/>\n<meta property=\"og:site_name\" content=\"Swapnil Zambare - Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-14T03:30:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-featured.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2400\" \/>\n\t<meta property=\"og:image:height\" content=\"1260\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Swapnil Zambare\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Swapnil Zambare\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/salesforce-single-sign-on-my-domain\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/salesforce-single-sign-on-my-domain\\\/\"},\"author\":{\"name\":\"Swapnil Zambare\",\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/#\\\/schema\\\/person\\\/922ac0131aaa7088c78c2cb1700e0c9a\"},\"headline\":\"Salesforce Single Sign-On and My Domain\",\"datePublished\":\"2026-07-14T03:30:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/salesforce-single-sign-on-my-domain\\\/\"},\"wordCount\":1552,\"publisher\":{\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/salesforce-single-sign-on-my-domain\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/salesforce-single-sign-on-my-domain-featured.png\",\"keywords\":[\"Advanced\",\"Salesforce\",\"Security\",\"Users\"],\"articleSection\":[\"Advanced Admin\",\"Salesforce\",\"Salesforce Admin\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/salesforce-single-sign-on-my-domain\\\/\",\"url\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/salesforce-single-sign-on-my-domain\\\/\",\"name\":\"Salesforce Single Sign-On and My Domain Guide\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/salesforce-single-sign-on-my-domain\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/salesforce-single-sign-on-my-domain\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/salesforce-single-sign-on-my-domain-featured.png\",\"datePublished\":\"2026-07-14T03:30:00+00:00\",\"description\":\"Salesforce Single Sign-On explained: My Domain, SAML, identity providers, Federation IDs and social sign-on, with a hands-on company login example.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/salesforce-single-sign-on-my-domain\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/salesforce-single-sign-on-my-domain\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/salesforce-single-sign-on-my-domain\\\/#primaryimage\",\"url\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/salesforce-single-sign-on-my-domain-featured.png\",\"contentUrl\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/salesforce-single-sign-on-my-domain-featured.png\",\"width\":2400,\"height\":1260,\"caption\":\"Salesforce Single Sign-On featured image: one company login for Salesforce\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/salesforce-single-sign-on-my-domain\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Salesforce Single Sign-On and My Domain\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/\",\"name\":\"Swapnil Zambare - Blog\",\"description\":\"Salesforce &amp; Tech Guides\",\"publisher\":{\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/#organization\",\"name\":\"Swapnil Zambare - Blog\",\"url\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/site-icon-512.png\",\"contentUrl\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/site-icon-512.png\",\"width\":512,\"height\":512,\"caption\":\"Swapnil Zambare - Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/theSwapnilZambare\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/#\\\/schema\\\/person\\\/922ac0131aaa7088c78c2cb1700e0c9a\",\"name\":\"Swapnil Zambare\",\"sameAs\":[\"https:\\\/\\\/swapnilzambare.com\\\/blog\"],\"url\":\"https:\\\/\\\/swapnilzambare.com\\\/blog\\\/author\\\/swapnil-zambare\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Salesforce Single Sign-On and My Domain Guide","description":"Salesforce Single Sign-On explained: My Domain, SAML, identity providers, Federation IDs and social sign-on, with a hands-on company login example.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/","og_locale":"en_US","og_type":"article","og_title":"Salesforce Single Sign-On and My Domain Guide","og_description":"Salesforce Single Sign-On explained: My Domain, SAML, identity providers, Federation IDs and social sign-on, with a hands-on company login example.","og_url":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/","og_site_name":"Swapnil Zambare - Blog","article_published_time":"2026-07-14T03:30:00+00:00","og_image":[{"width":2400,"height":1260,"url":"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-featured.png","type":"image\/png"}],"author":"Swapnil Zambare","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Swapnil Zambare","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/#article","isPartOf":{"@id":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/"},"author":{"name":"Swapnil Zambare","@id":"https:\/\/swapnilzambare.com\/blog\/#\/schema\/person\/922ac0131aaa7088c78c2cb1700e0c9a"},"headline":"Salesforce Single Sign-On and My Domain","datePublished":"2026-07-14T03:30:00+00:00","mainEntityOfPage":{"@id":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/"},"wordCount":1552,"publisher":{"@id":"https:\/\/swapnilzambare.com\/blog\/#organization"},"image":{"@id":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/#primaryimage"},"thumbnailUrl":"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-featured.png","keywords":["Advanced","Salesforce","Security","Users"],"articleSection":["Advanced Admin","Salesforce","Salesforce Admin"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/","url":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/","name":"Salesforce Single Sign-On and My Domain Guide","isPartOf":{"@id":"https:\/\/swapnilzambare.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/#primaryimage"},"image":{"@id":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/#primaryimage"},"thumbnailUrl":"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-featured.png","datePublished":"2026-07-14T03:30:00+00:00","description":"Salesforce Single Sign-On explained: My Domain, SAML, identity providers, Federation IDs and social sign-on, with a hands-on company login example.","breadcrumb":{"@id":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/#primaryimage","url":"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-featured.png","contentUrl":"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/10\/salesforce-single-sign-on-my-domain-featured.png","width":2400,"height":1260,"caption":"Salesforce Single Sign-On featured image: one company login for Salesforce"},{"@type":"BreadcrumbList","@id":"https:\/\/swapnilzambare.com\/blog\/salesforce-single-sign-on-my-domain\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/swapnilzambare.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Salesforce Single Sign-On and My Domain"}]},{"@type":"WebSite","@id":"https:\/\/swapnilzambare.com\/blog\/#website","url":"https:\/\/swapnilzambare.com\/blog\/","name":"Swapnil Zambare - Blog","description":"Salesforce &amp; Tech Guides","publisher":{"@id":"https:\/\/swapnilzambare.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/swapnilzambare.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/swapnilzambare.com\/blog\/#organization","name":"Swapnil Zambare - Blog","url":"https:\/\/swapnilzambare.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/swapnilzambare.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/09\/site-icon-512.png","contentUrl":"https:\/\/swapnilzambare.com\/blog\/wp-content\/uploads\/2026\/09\/site-icon-512.png","width":512,"height":512,"caption":"Swapnil Zambare - Blog"},"image":{"@id":"https:\/\/swapnilzambare.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/in\/theSwapnilZambare"]},{"@type":"Person","@id":"https:\/\/swapnilzambare.com\/blog\/#\/schema\/person\/922ac0131aaa7088c78c2cb1700e0c9a","name":"Swapnil Zambare","sameAs":["https:\/\/swapnilzambare.com\/blog"],"url":"https:\/\/swapnilzambare.com\/blog\/author\/swapnil-zambare\/"}]}},"_links":{"self":[{"href":"https:\/\/swapnilzambare.com\/blog\/wp-json\/wp\/v2\/posts\/809","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/swapnilzambare.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/swapnilzambare.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/swapnilzambare.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/swapnilzambare.com\/blog\/wp-json\/wp\/v2\/comments?post=809"}],"version-history":[{"count":0,"href":"https:\/\/swapnilzambare.com\/blog\/wp-json\/wp\/v2\/posts\/809\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/swapnilzambare.com\/blog\/wp-json\/wp\/v2\/media\/779"}],"wp:attachment":[{"href":"https:\/\/swapnilzambare.com\/blog\/wp-json\/wp\/v2\/media?parent=809"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/swapnilzambare.com\/blog\/wp-json\/wp\/v2\/categories?post=809"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/swapnilzambare.com\/blog\/wp-json\/wp\/v2\/tags?post=809"},{"taxonomy":"swapz_series","embeddable":true,"href":"https:\/\/swapnilzambare.com\/blog\/wp-json\/wp\/v2\/swapz_series?post=809"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}