Certified Identity and Access Management Designer

By Salesforce · Question Mode

QuestionQ8

VerifiedAccepting 3rd Party Identity in Salesforce

Universal Containers (UC) implemented SSO to a third-party system so its Salesforce users can access the App Launcher. UC enabled User Provisioning on the Connected App so that user-account changes can be synchronized between Salesforce and the third-party system. However, UC soon notices that changes to Salesforce user roles are not being synchronized to the third-party system.

What is the likely reason for this behavior?

Explanation

Connected App user provisioning does not synchronize Salesforce roles to the third-party service. Salesforce states that roles and permissions for the service provider cannot be managed or stored in Salesforce; the third-party service must manage users’ additional roles and permissions.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!