Known Issues · Authentication

'Login As user ' in lightning with lock session to domain invalidate session quickly

Performance , Authentication , Summer 17 , Lightning

SUMMARY: In Summer '17, if both a System Admin and their user are on Lightning, then the System Admin can encounter a forceful logout when attempting to use 'Login As' to the other Lightning user.

In Review ·Reported By 174 ·Updated 4 days ago

Unable to delete SAML Config

Authentication

Delete/Disable SAML config result in error: "Your organization or community is currently using this Single Sign-On Setting as an authentication method, so you can’t delete it."

In Review ·Reported By 102 ·Updated 2 days ago

Forgot password link loops back to login screen after answer security question correctly

Authentication

When a User attempts to reset their password ,using the "forgot password" feature, they are routed back to the Login page with the error "please enter your password". Even when their answer is correct. This seems to effect Organizations when they have "a minimum 1 day password lifetime" checked under...

In Review ·Reported By 67 ·Updated 3 days ago

SCIM V2 PATCH is not in compliance with RFC7644

API , Authentication

SCIM PATCH method doesn't update the Groups as per the RFC7644 SCIM specification: https://tools.ietf.org/html/rfc7644#section-3.5.2

Scheduled - Winter '21 ·Reported By 3 ·Updated 2 days ago

Unable to Generate a Temporary Identity Verification Code from within a list view

Authentication

Attempting to Generate a Temporary Identity Verification Code for 2FA use from within a User list view receives an error indicating "You don't have access to this record. Ask your administrator for help or to request access."

In Review ·Reported By 0 ·Updated 2 days ago

Broken forgot password flow in Lightning communities if the standard forgotPassword Lightning component is used

Authentication , Communities , Lightning

In organizations that enabled Communities before Summer '20, the forgot password flow breaks in Lightning communities that use a custom forgot password page if the standard forgotPassword Lightning component is leveraged. This component gets automatically created upon enabling Communities but a spelling...

Release In Progress - Summer '20 ·Reported By 2 ·Updated 3 days ago

[Salesforce IdP] Even if [Verify Request Signatures] is Enable, It doesn't check expiration date of SP Certificate in SAML

Authentication

In Salesforce IdP, enable Verify Request Signatures. The IdP verifies the SP's signed request. However, It doesn't check the expiration date of the SP Certificate So, you can log in as it is with SAML

In Review ·Reported By 8 ·Updated 4 days ago

In case of old SAML request using SP-initiated the error message is incorrect

Authentication

Customer have configured SAML and are using SP-initiated SSO. Error occurs when SAML response is sent to Salesforce 8 minutes after Salesforce generates the SAML request. It is a WAD as https://help.salesforce.com/articleView?siteLang=en_us&id=000187624&type=1, but the error message is incorrect...

In Review ·Reported By 22 ·Updated 5 days ago

redirect_uri isn't associated with community URL when Auth. Provider SSO is initiated from "Community Builder Page"

Authentication , Communities

When MyDomain is enabled and Auth. Provider SSO is initiated from "Community Builder Page", redirect_uri is associated with standard login URL instead of Community URL. This doesn't occur when it's initiated from "Default Page".

In Review ·Reported By 6 ·Updated 5 days ago

Single Sign On fails in Communities when the configured custom domain starts with "login"

Authentication

Single Sign-On fails in Communities with "Failed: Recipient Mismatched" when the community has custom domain starts with "login".

Scheduled - Winter '21 ·Reported By 3 ·Updated 5 days ago