Knowledge Base

By configuring Salesforce as an Identity Provider, users in your org will be able to leverage Single Sign-On to authenticate to TruQu. Rather than entering a TruQu password, users can click a “Log in with Salesforce” button to authenticate.

In order to make use of this functionality, some items need to be configured within the Salesforce org as well as in TruQu.

1. Salesforce must be enabled as an Identity Provider
2. TruQu needs some specific information about your Salesforce org and the Identity Provider configuration. After enabling the Identity Provider functionality, metadata can be downloaded as an XML file. This file must be sent to support@truqu.com
3. Finally, a Connected App must be created within the Salesforce org. This configures how Salesforce can communicate with TruQu as well as which users are allowed to use TruQu and the Single Sign on functionality.

In order to create the Connected App, some configuration in Salesforce is required.

In the configuration-values listed below, <subdomain> should be replaced with the actual subdomain of your TruQu environment.

Start URL: https://<subdomain>.truqu.com
Entity ID: https://<subdomain>.truqu.com/saml/metadata
ACS URL: https://<subdomain>.truqu.com/saml/consume
Subject type: A (Salesforce) property containing the e-mail addresses as used in TruQu should be selected here. In most cases, this would be Username
Name ID Format: persistent

When the above configuration is completed and TruQu has processed the forwarded metadata.xml file, the SSO integration is complete and will be enabled.