Salesforce as an OpenId Authentication Provider

Google Apps offers the OpenID API, which allows end users to securely log in to third-party websites using their Google Apps user account.

I want to offer similar functionality - that is, I want users of my website to authenticate using their Salesforce account using OpenID.

Does Salesforce have similar API / functionality? I checked the documentation and saw references to the OpenID Connect API, but this seems to be in the early stages of development. I also tested the Salesforce Identity Provider function, but it seems to be more SSO-oriented (not quite sure though, please correct me if I'm wrong).

+4
source share
2 answers

As an update for this question, since I was looking for the same function, Salesforce can now act as an openid connect provider. see this for more information:

https://developer.salesforce.com/page/Inside_OpenID_Connect_on_Force.com

+5
source

(this is an old answer from how the open id connection was opened)

they do not yet support openid connect. at the same time take a look at the oauth 2.0 web server stream and use the "id" scope to get the user id.

http://wiki.developerforce.com/page/Digging_Deeper_into_OAuth_2.0_on_Force.com

at the oauth protocol level, there is no guarantee that this identifier belongs to the user or that it is unique and does not change, but people still use this identifier for authentication. it basically works openid connect; openid connect only formalizes it and adds some extra validation.

+1
source

Source: https://habr.com/ru/post/1485998/


All Articles