search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.2k stars 21.34k forks source link

Get a SAML assertion from AAD to obtain a Salesforce access token #86710

Closed albertlicrunch closed 7 months ago

albertlicrunch commented 2 years ago

I have successfully integrated SSO for AAD(as Identity Provider) and Salesforce( as Service Provider) following this doc: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/salesforce-tutorial

Now I'm trying to get a SAML assertion for a Salesforce API to obtain an access token. This possibility is already confirmed here https://github.com/MicrosoftDocs/azure-docs/issues/45071#issuecomment-570629846 but still not clear how to achieve it. Is there any examples or steps how to do that?

This kind of question has been raised here https://github.com/MicrosoftDocs/azure-docs/issues/45071#issuecomment-624605575 and here https://github.com/MicrosoftDocs/azure-docs/issues/45071#issuecomment-655623908 but no reply.

In the same time, I found a mention that Salesforce supports only SP initiated SSO here: https://github.com/MicrosoftDocs/azure-docs/issues/78331#issuecomment-880173706

Please clarify

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

BryanTrach-MSFT commented 2 years ago

@albertlicrunch Thanks for the feedback! We are currently investigating and will update you shortly.

kheast commented 2 years ago

I'm encountering the same problem. Any clarification/guidance would be appreciated.

dotnetnick commented 2 years ago

I have the same problem. Where from to get the value for the required assertion parameter? Trying to make it work with a managed identity "user" by sending /oauth2/v2.0/token POST from a logic app.

gazben commented 1 year ago

@BryanTrach-MSFT Do you have any update on this?