When assigning Salesforce sandbox enterprise application to a user, I am not able to see custom profiles of salesforce

Question

I have created an enterprise application for Salesforce Sandbox. I have configured Single SIgn On.

Now while assigning this application to users in Azure AD, I have to select the 'Users and Groups' and 'role'.

Under role, I can only see the standard salesforce profiles. I am not able to see the custom profiles I have created in Salesforce.

The single sign on itself is working fine for standard profiles.

However I want to assign this application to users with correct custom profile.

Any help in this would be appreciated

Answer 1

@Sanjeev Karanwal

Thank you for posting your question in Microsoft Q&A.

If you want to assign users to application in Azure AD with correct custom profile (role), then you will have to specifically create/define the role in Azure AD for salesforce application. You can create these custom profiles which should be similar to the ones that you have them in salesforce application.

You can follow below steps to do that same.

• Login to Azure AD portal and access the application registration blade.
• Click on salesforce application.
• Click on "App roles" blade on the left. You will be able to see the default salesforce application roles which are already added.
• Now you can click on the "Create app role" and define your own custom profile which is similar to the one as in your salesforce application.
• You will have to give a name to the role that you define.
• Value specifies the value of the roles claim that the application should expect in the token. The value should exactly match the string referenced in the application's code. The value can't contain spaces.

Once you configure the above, this custom profile/role will be available for you while assigning an application to user or group in Azure AD.

Later you can configure application to send app role as claims to application while doing SSO.

You can also refer below article to get more information on this.

https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-add-app-roles-in-azure-ad-apps

Do let me know if you have any questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.