ISVforce Guide
jNewer Version Available
Single Sign-on in the Environment Hub
Developing, testing, and deploying apps means switching between multiple Salesforce
environments and providing login credentials each time. Single sign-on (SSO) simplifies this
process by letting an Environment Hub user log in to member orgs without reauthenticating. You
can set up SSO by defining user mappings manually, using Federation IDs, or creating a
formula.
| Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience |
| Available in: Enterprise, Performance, and Unlimited Editions |
The Environment Hub supports these SSO methods for matching users.
| SSO Method | Description |
|---|---|
| Mapped Users | Match users in the Environment Hub to users in a member org manually. Mapped Users is the default method for SSO user mappings defined from the member detail page. |
| Federation ID | Match users who have the same Federation ID in both the Environment Hub and a member org. |
| User Name Formula | Match users in the Environment Hub and a member org according to a formula that you define. |
If you specify multiple SSO methods, they’re evaluated in this order: (1) Mapped Users, (2)
Federation ID, and (3) User Name Formula. The first method that results in a match is used to
log in the user, and the other methods are ignored. If a matching user can’t be identified,
the Environment Hub directs the user to the standard Salesforce login page.