Salesforce Identity: Connect and Collaborate Anywhere, Securely with Single Sign-On
0 likes2,162 views
The document provides an overview of Salesforce Identity, an identity and access management service that includes features like user management, single sign-on, and mobile identity. It outlines various licensing options and covers use cases for employees and customers, including the setup for social sign-on and the Private App Exchange. Additionally, it details the Identity Connect for integrating with Active Directory, along with implementation guides and support resources.
![Overview
• What is Salesforce Identity and what does it do?
– Salesforce Identity is an Identity and Access Management Service
[IAM]
• Salesforce Identity has following capabilities:
– Cloud-based user directories
– Authentication services to verify users and keep granular control
over user access
– Access management and authorization for third-party apps
– Provisioning and de-provisioning of apps
– An API for viewing and managing your deployment of Identity
features
– Reporting on the use of apps and services by your Identity users
– Salesforce Identity Connect: for single sign-on integration with
directory services like Microsoft Active Directory
7](https://image.slidesharecdn.com/tipswebinarsalesforceidentity-finaldistro-140226113411-phpapp02/85/Salesforce-Identity-Connect-and-Collaborate-Anywhere-Securely-with-Single-Sign-On-7-320.jpg)
![Licensing
•
•
•
•
Existing customer with Enterprise Edition or above already have it free
Salesforce Identity License – cloud based identity for mobile, web and onpremise
– [$5/user/mo. billed annually], includes:
– Single sign-on
– Mobile identity
– Chatter
– User and access management
– Cloud directory
– Multi-factor authentication
– Reporting and dashboards
– Brandable services
– Social sign-on
Salesforce Identity Connect License – Use existing directory services
– Includes Active Directory connector for provisioning and single sign-on.
– Add-on to Salesforce Identity license
External identities - Manage identities for customers, partners and other external
users. Flexible options per user/mo. or per login/mo. available by contacting
Salesforce
8](https://image.slidesharecdn.com/tipswebinarsalesforceidentity-finaldistro-140226113411-phpapp02/85/Salesforce-Identity-Connect-and-Collaborate-Anywhere-Securely-with-Single-Sign-On-8-320.jpg)
![Salesforce Identity – Employee Use Case & Setup
A company needs the employees to sign-in to multiple applications to
get their job done.
• Need to setup My Domain [required]
• Optional – customize login page
• Setup Salesforce as Identity provider for Single Sign On [SSO]
• Setup SAML based SSO between Salesforce and External Application
[e.g. Google Apps]
• Setup App Launcher control which users have access to which
applications and provide a single place to launch external applications
without logging in again
• Optional – Setup Private AppExchange
• Optional - Setup permission sets to control access to applications
• Optional - Build Reports and dashboards to track user activity and app
usage
• Optional - Enhance security using two-factor authentication
• Optional – Integrate with corporate Active Directory to automatically login
to Salesforce.com using their corporate user identity
10](https://image.slidesharecdn.com/tipswebinarsalesforceidentity-finaldistro-140226113411-phpapp02/85/Salesforce-Identity-Connect-and-Collaborate-Anywhere-Securely-with-Single-Sign-On-10-320.jpg)
![Salesforce Identity – Customer/Partner Use Case & Setup
A company needs the customers/partners to sign-in to
portal/community web sites using their Google or Facebook
credentials.
• Need to setup My Domain [required]
• Setup Google as Authentication Provider
• Configure oAuth on Google
• Customize automatic user provisioning up on login
• Setup Customer Community site and setup access permissions
• Customize customer community tabs/pages, colors and logos
• Configure Customer Community to use Google Authentication Provider
12](https://image.slidesharecdn.com/tipswebinarsalesforceidentity-finaldistro-140226113411-phpapp02/85/Salesforce-Identity-Connect-and-Collaborate-Anywhere-Securely-with-Single-Sign-On-12-320.jpg)
![Identity Connect – Setup Steps
Acquire Identity
Connect Licenses
Map Users
Setup Connected App
and My Domain
Setup Sync Schedule
Download & Install
Identity Connect behind
firewall
Configure SSO Manually
or Automatically
Configure Identity
Connect to Active
Directory Connection
Configure Integrated
Windows
Authentication [IWA]
Configure Identity
Connect to Salesforce
Connection
Configure Auditing &
Reports
21](https://image.slidesharecdn.com/tipswebinarsalesforceidentity-finaldistro-140226113411-phpapp02/85/Salesforce-Identity-Connect-and-Collaborate-Anywhere-Securely-with-Single-Sign-On-21-320.jpg)
Salesforce Identity: Connect and Collaborate Anywhere, Securely with Single Sign-On
- 1. Salesforce Identity Tips & Techniques for Advanced Users & Administrators Vilas Ekbote Director Technical Services SFDC East facebook.com/perficient linkedin.com/company/perficient twitter.com/perficient
- 2. Perficient Profile • • • • • • • • • • Founded in 1997 Public, NASDAQ: PRFT 2013 revenue of $375 million Major market locations throughout North America Global delivery centers in China, Europe and India >2,100 colleagues Dedicated solution practices ~90% repeat business rate Alliance partnerships with major technology vendors Multiple vendor/industry technology and growth awards
- 3. Salesforce Business Unit • • • • • • Combined strength of two well established Salesforce.com Gold Cloud Alliance Partners – Previously known as Clear Task and CoreMatrix 75 certified consultants, 177 Salesforce.com Certifications More than 450 customers Completed ~3,000 Salesforce engagements Salesforce Cloud expertise: Sales, Service, Marketing, Chatter, and custom development on Force.com One of the highest Salesforce.com customer satisfaction ratings: 9.5 out of 10!
- 4. Topics Salesforce Identity • • • • • • • Overview Features Licenses Identity Use Cases Demo – Connected Apps – My Domain & Branded Login – App Launcher – Two-factor Authentication – Identity Reports & Dashboards Private AppExchange Identity Connect Q&A
- 5. Salesforce Identity for Everyone Customers From Any Device Partners Employees 5
- 6. Salesforce Identity Features/Technologies Salesforce Identity My Domain Brandable Login User & Access Management Single Sign on Multi-factor Authentication Mobile Identity Directory Integration Connected Apps Reports & Dashboards Social Sign on Open Standards Support 6
- 7. Overview • What is Salesforce Identity and what does it do? – Salesforce Identity is an Identity and Access Management Service [IAM] • Salesforce Identity has following capabilities: – Cloud-based user directories – Authentication services to verify users and keep granular control over user access – Access management and authorization for third-party apps – Provisioning and de-provisioning of apps – An API for viewing and managing your deployment of Identity features – Reporting on the use of apps and services by your Identity users – Salesforce Identity Connect: for single sign-on integration with directory services like Microsoft Active Directory 7
- 8. Licensing • • • • Existing customer with Enterprise Edition or above already have it free Salesforce Identity License – cloud based identity for mobile, web and onpremise – [$5/user/mo. billed annually], includes: – Single sign-on – Mobile identity – Chatter – User and access management – Cloud directory – Multi-factor authentication – Reporting and dashboards – Brandable services – Social sign-on Salesforce Identity Connect License – Use existing directory services – Includes Active Directory connector for provisioning and single sign-on. – Add-on to Salesforce Identity license External identities - Manage identities for customers, partners and other external users. Flexible options per user/mo. or per login/mo. available by contacting Salesforce 8
- 9. Topics Salesforce Identity • • • • • • • Overview Features Licenses Identity Use Cases Demo – Connected Apps – My Domain & Branded Login – App Launcher – Two-factor Authentication – Identity Reports & Dashboards Private AppExchange Identity Connect Q&A
- 10. Salesforce Identity – Employee Use Case & Setup A company needs the employees to sign-in to multiple applications to get their job done. • Need to setup My Domain [required] • Optional – customize login page • Setup Salesforce as Identity provider for Single Sign On [SSO] • Setup SAML based SSO between Salesforce and External Application [e.g. Google Apps] • Setup App Launcher control which users have access to which applications and provide a single place to launch external applications without logging in again • Optional – Setup Private AppExchange • Optional - Setup permission sets to control access to applications • Optional - Build Reports and dashboards to track user activity and app usage • Optional - Enhance security using two-factor authentication • Optional – Integrate with corporate Active Directory to automatically login to Salesforce.com using their corporate user identity 10
- 11. Demo 1 • Demo Employee Flow - Salesforce Identity Single SignOn with Google Apps • My Domain • Connected Apps • App Launcher 11
- 12. Salesforce Identity – Customer/Partner Use Case & Setup A company needs the customers/partners to sign-in to portal/community web sites using their Google or Facebook credentials. • Need to setup My Domain [required] • Setup Google as Authentication Provider • Configure oAuth on Google • Customize automatic user provisioning up on login • Setup Customer Community site and setup access permissions • Customize customer community tabs/pages, colors and logos • Configure Customer Community to use Google Authentication Provider 12
- 13. Demo 2 • Demo Customer Flow - Social sign-on using Google credentials • Social sign-on using Google Account for Customer Community • Automatic user provisioning and contact creation • Private AppExchange - setup 13
- 14. Identity Reports & Dashboards 14
- 15. Topics Salesforce Identity • • • • • • • Overview Features Licenses Identity Use Cases Demo – Connected Apps – My Domain & Branded Login – App Launcher – Two-factor Authentication – Identity Reports & Dashboards Private AppExchange Identity Connect Q&A
- 16. Private App Exchange Private AppExchange empowers organizations with their own trusted corporate app store. You create a secure, branded location to distribute apps to your employees, giving them the power to choose the apps that will make them most productive at work. 16
- 17. Private App Exchange • Private AppExchange itself is an AppExchange App • Requires Translation Workbench must be enabled with at least one language 17
- 18. Topics Salesforce Identity • • • • • • • Overview Features Licenses Identity Use Cases Demo – Connected Apps – My Domain & Branded Login – App Launcher – Two-factor Authentication – Identity Reports & Dashboards Private AppExchange Identity Connect Q&A
- 19. Identity Connect - Overview • Identity Connect provides Active Directory integration • Integration includes syncing Active Directory users with one or more Salesforce orgs • Identity Connect acts as the Identity Service Provider (IDP) for Single Sign On (SSO) Active Directory integration when logging into Salesforce • Identity Connect licenses need to be acquired – separate from Salesforce Identity • Identity on-premise software needs to be installed and configured • Supports high availability configurations • Supports Integrated Windows Authentication 19
- 20. Identity Connect - Overview Outline of the Setup Process Outline of the Setup Process Setting up Identity Connect involves the configuration of multiple systems. The following flowchart provides a high-level overview of what happens between these systems during the setup 20
- 21. Identity Connect – Setup Steps Acquire Identity Connect Licenses Map Users Setup Connected App and My Domain Setup Sync Schedule Download & Install Identity Connect behind firewall Configure SSO Manually or Automatically Configure Identity Connect to Active Directory Connection Configure Integrated Windows Authentication [IWA] Configure Identity Connect to Salesforce Connection Configure Auditing & Reports 21
- 22. Check It Out Yourself! • Salesforce Identity Implementation Guide – http://bit.ly/1jcMjGT • Salesforce Identity Connect Implementation Guide – http://bit.ly/1jHFZa0 • More Information on Developerforce.com – http://bit.ly/1fzDcff 22
- 23. Salesforce Identity Complimentary Consultation Are you using Salesforce Identity with single sign-on to seamlessly connect your customers, partners and employees to all of your applications?
- 24. Questions? Please enter your questions through the “Chat” panel 2/25/2014 24
- 25. Thank You! For more information contact: 877-276-2120 sales@perficient.com www.perficient.com www.facebook.com/perficient www.twitter.com/perficient