Set up SSO with Salesforce as Identity Provider
Walkthrough of the steps required to set up Single Sign-On with Salesforce as the Identity Provider and GetAccept as the Service Provider.
Last updated: March 2023
Overview
This guide explains how to configure Salesforce as the Identity Provider (IdP) and GetAccept as the Service Provider (SP) for Single Sign-On (SSO). Once completed, your users will be able to log in to the GetAccept integration in Salesforce with one click, as long as they are already signed in to Salesforce.
Step 1: Enable Salesforce as the Identity Provider
-
In Salesforce, navigate to: Setup → Identity Provider.
-
Enable Identity Provider (if not already enabled).
-
Create a new certificate (if none currently exists).
-
Download the certificate and save it — you’ll need it later in Step 3.
More details are available in Salesforce’s documentation.
Step 2: Create a Connected App with SAML
-
Navigate to: Setup → App Manager → New Connected App.
-
Configure the Connected App with the following details:
-
Subject: Federation ID (set to the email address used to log in to GetAccept)
-
Service Provider Entity ID:
https://app.getaccept.com/auth/saml/{entityId}/api/metadata.xml
-
Service Provider ACS URL:
https://app.getaccept.com/auth/saml/{entityId}/api/acs
-
Name ID Format:
emailAddress
-
IdP Certificate: Use the certificate created in Step 1.
-
-
Save and create the Connected App.
-
Click Manage to view details and confirm the configuration.
Reference: Salesforce documentation on creating a SAML Connected App.
Step 3: Set up SAML Authentication in GetAccept
-
In GetAccept, go to: Settings → Integrations → Provisioning and SSO.
-
Click Connect SAML Authentication.
-
Fill out the SAML Authentication form with details from the Salesforce Connected App:
-
Identity Provider Issuer URL → Connected App Issuer
-
SSO Login Redirect URL → Connected App IdP-Initiated Login URL
-
Certificate → Paste contents of the downloaded IdP certificate
-
-
Select the option: GetAccept platform and API or Integration.
-
(Optional) Enable SAML for all entities if you want this setup to apply across all entities.
Step 4: Create Permission Set for the Managed Connected App
-
In Salesforce, navigate to: Setup → Permission Sets → New Permission Set.
-
Assign the previously created Connected App to this permission set.
-
Assign all relevant users to the permission set so they can log in via SSO.
Step 5: Enable SSO in the GetAccept Salesforce Setup
-
In Salesforce, go to: App Launcher → GetAccept Admin → Setup → Basic Settings.
-
Scroll to the SSO Settings section at the bottom of the page.
-
Enter your Entity ID in the SSO Entity ID field.
-
Enable the SSO toggle.
-
(Optional) Enforce SSO to require users to log in exclusively via Salesforce SSO.
-
Test the login to confirm the integration works.
Your GetAccept integration is now configured to use Salesforce as the Identity Provider for SSO.