Juniper SA SAML SSO with Salesforce

[StevieRay_]

Hi,

Has anyone found a good guide for setting up SAML SSO to Salesforce at all? I've been trying to hunt down some notes but can't find enough to help me. Ideally I'd like to take a users email address from LDAP and pass this through to SF using the Juniper SA as the id provider.

Thanks in advance.

[SVK_]

Please check if the following document helps you

http://www.juniper.net/techpubs/software/ive/releasenotes/SAMLIntegrationGuide.pdf

[zanyterp_]

To jump from Viji's question, do you have this working internally? What IVE OS are you using?

[StevieRay_]

I have read through the suggested document though it is quite old (2004) and does not cover SAML 2.0 and the specifics needed to setup a SAML connection.

We use another SAML 2.0 product internally to connect users to a SaaS application and the vendor provides a good guide for using their product with Salesforce. The Salesforce SAML configuration is quite simple though overlaying this onto the Juniper SA is quite involved and so far I can find any guiding information.

I appreciate this is partly my lack of in-depth knowledge on SAML though some example deployment guide would be helpful. I guessing this means using a Juniper specialist from a consultancy company might be the only way forward.

[zanyterp_]

That may be your best bet; the current documentation is found here: https://www.juniper.net/support/products/sa/

Unfortunately, as you know, it is not possible to test all sites. I will try to see if there is a way for me to test this and will get back to you (it will take me several days).

[bspilde_]

Did you ever get this working?

[jayLaiz_]

Hi,

In 7.2 and higher, SA/MAG can act as IDP so this should work, we do not have this setup in lab but if youcan let us know how you have configured the SA part and we can check where it is failing.

Regards,

Jay