Exium’s IAM360 with Multi-Factor Authentication (MFA) enhances secure SAML-based Single Sign-On (SSO) to Salesforce by requiring an extra verification step, mitigating risks of unauthorized access. By integrating SAML-based SSO, IAM360 offers a seamless login experience with a single set of credentials, improving security and user convenience. It simplifies administration through centralized identity management, ensuring consistent enforcement of security policies and access controls, thus protecting sensitive Salesforce data and ensuring regulatory compliance.
¶ Login to your IAM360 Console
If you have not already logged in to your IAM360 Console, simply follow the steps here.
¶ Download the SAML 2.0 Identity Provider Metadata
After you are logged in to your IAM360 Console, you will see the page shown in the screenshot below.
- Click on “IAM” in the left menu bar → “Identity Management”
- Realm settings → click on the “SAML 2.0 Identity Provider Metadata” to down the file. You will need this file in the next step when creating a SAML SSO Setting in Salesforce.
¶ Create a SAML SSO Setting in Salesforce
At any time during the integration process, you can refer to Salesforce instructions on Configure SSO with Salesforce as a SAML Service Provider.
- From Setup, in the Quick Find box, enter Single, and then select Single Sign-On Settings.
- If SAML isn’t enabled, turn it on. Click Edit → Select SAML Enabled → Save the change.
- In SAML Single Sign-On Settings, click New from Metadata File
- Click on “Choose File” → Select the SAML 2.0 Identity Provider Metadata XML file you saved in the previous step.
- Click on “Create”
¶ Download Metadata File from Salesforce
- In your Salesforce console, Click on the SAML SSO Setting you created. We named it IAM360 as in the screenshot below. You can edit the name to your preference
- Click “Download Metadata”
- Save the File as you will need it in the next step
¶ Import Client into IAM360
You can simply import the client into your IAM360 console to create a SAML client, follow the steps below.
- Click on “IAM” in the left menu bar → “Identity Management”
- Click on “Clients” → “Import client”
- Click on “Browse” and select the Metadata file you downloaded from Salesforce SSO Setting
- Save the settings
- If the app you are integrating with does not have option to download Metadata, you can manually create a client by clicking on “Create client” in your IAM360 console.
¶ Add IAM360 to the My Domain Login Page in Salesforce
At anytime, you can also refer to the instruction provided by Salesforce here.
- From Setup, in the Quick Find box, enter My Domain, and then select My Domain.
- Under Authentication Configuration, click Edit.
- Select the authentication services that you want to make available on the login page.
- Save your changes.
You can list all your org’s available SSO identity providers on your login page. If you have several, consider setting up your login page with the Login Discovery page type.
After completing the above steps, your Salesforce login page will show the IAM360 SSO option.
Note we named the SSO integration as IAM360, you can change it the way you like by editing the name in Salesforce Single Sign On settings.
We selected both the “Login Form” and the “IAM360” as authentication services in Salesforce. If you deselect “Login Form” (see the screenshot above), only IAM360 option will show for Salesforce Login.
¶ Conclusion
IAM360 by Exium is a comprehensive Identity and Access Management solution purpose-built for MSPs and their SMB/mid-market customers. With its array of features tailored to meet the specific needs of MSPs and SMBs, IAM360 empowers organizations to enhance security, streamline access management, and drive business growth. By leveraging IAM360, MSPs can deliver value-added services to their customers while ensuring robust security and compliance.
To learn more about implementing IAM360 for your organization and explore tailored solutions that meet your unique requirements, contact Exium at partners@exium.net for a consultation or demonstration.
Empower Your MSP Business with IAM360! 🛡️