The objective of this section is to outline how to enable user provisioning of Active Directory user accounts to Salesforce Sandbox. Configure automatic user account provisioning Single sign-on can be configured independently of automatic provisioning, though these two features compliment each other. You may also choose to enabled SAML-based Single Sign-On for Salesforce Sandbox, following the instructions provided in Azure portal.
The "Default Access" role does not work for provisioning. When assigning a user to Salesforce Sandbox, you must select a valid user role. Additional users and/or groups may be assigned later. It is recommended that a single Azure AD user is assigned to Salesforce Sandbox to test the provisioning configuration. After you've made this decision, you can assign these users to your Salesforce Sandbox app by following the instructions in Assign a user or group to an enterprise app Important tips for assigning users to Salesforce Sandbox In the context of automatic user account provisioning, only the users and groups that have been "assigned" to an application in Azure AD are synchronized.īefore configuring and enabling the provisioning service, you need to decide which users or groups in Azure AD need access to your Salesforce Sandbox app. A user account in Salesforce Sandbox with Team Admin permissions.Īzure Active Directory uses a concept called "assignments" to determine which users should receive access to selected apps.
You may use a free trial account for either service. A valid tenant for Salesforce Sandbox for Work or Salesforce Sandbox for Education.The scenario outlined in this tutorial assumes that you already have the following items: The objective of this tutorial is to show you the steps you need to perform in Salesforce Sandbox and Azure AD to automatically provision and de-provision user accounts from Azure AD to Salesforce Sandbox.
0 kommentar(er)
