> For the complete documentation index, see [llms.txt](https://docs.1kosmos.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.1kosmos.com/integrations/authentication/pre-built-integrations/salesforce.md).

# Salesforce

**This integration does not support the Salesforce Sandbox edition.** Use a Production instance.

***

### Prerequisites

Before starting, make sure you have:

* **AdminX portal** — Admin access to your 1Kosmos AdminX tenant.
* **Salesforce instance** — Admin access with access to the Setup screen. ([Sign up here](https://developer.salesforce.com/) if needed.)
* **1Kosmos mobile app** — Installed and enrolled on iOS or Android. ([Android](https://play.google.com/store) · [iOS](https://apps.apple.com/))
  * Biometrics (Touch ID / Face ID or LiveID) must be enrolled before testing.

***

### Step 1 — Configure Salesforce

{% hint style="info" %}
**Note:** These steps are performed by your Salesforce administrator.
{% endhint %}

1. Sign in to Salesforce and go to **Settings (gear icon) → Setup**.
2. Copy and save your **Salesforce domain URL** (e.g., `https://<your_domain>.my.salesforce.com`).

#### Generate a Security Token

You'll need a security token to authenticate AdminX with Salesforce during setup.

1. Click your **avatar → Settings → Reset My Security Token**.
2. Click **Reset Security Token**. A new token will be emailed to you.
3. Copy and save the token from the email.

***

### Step 2 — Connect Salesforce in AdminX

{% hint style="info" %}
**Note:** These steps are performed by your AdminX administrator.\
Credentials entered here are **one-time use only**. 1Kosmos does not store them — rotate passwords and revoke tokens after setup.
{% endhint %}

1. Sign in to the AdminX portal and go to **Applications → Add Application**.
2. Under **Pre-built integrations**, click **Add Integration** on the **Salesforce** card.
3. Fill in the following fields:

   | Field                     | Value                                    |
   | ------------------------- | ---------------------------------------- |
   | Application Name          | A display name for this integration      |
   | Salesforce Domain         | Your Salesforce domain URL (from Step 1) |
   | Salesforce Username       | Your Salesforce admin username           |
   | Salesforce Password       | Your Salesforce admin password           |
   | Salesforce Security Token | The token generated in Step 1            |
4. Click **Connect**.

AdminX automatically creates an SP configuration in Salesforce named **BlockID** and enables the SAML integration.

***

### Step 3 — Post-Setup Salesforce Configuration (Optional)

These steps fine-tune the auto-generated SP configuration. Perform them in your Salesforce admin console.

{% hint style="info" %}
**Note:** These steps are performed by your Salesforce administrator.
{% endhint %}

#### Enable SAML SSO

1. Go to **Settings → Identity → Single Sign-On Settings**.
2. Click **Edit**, check **SAML Enabled**, and click **Save**.

#### Update User Federation ID

Each user must have a Federation ID that matches their AdminX-linked email address.

1. Go to **Administration → Users → Users**.
2. Click **Edit** next to the relevant user.
3. Under **Single Sign On Information**, set **Federation ID** to the user's email address (the same email linked to the Salesforce app in AdminX).
4. Click **Save**.

#### Set Default Authentication to 1Kosmos

1. Go to **Settings → Company Settings → My Domain → Authentication Configuration**.
2. Click **Edit**.
3. Under **Authentication Service**, select the **BlockID** SSO instance.
4. Click **Save**.

***

### Step 4 — Test the Connection

1. Open a browser and go to your Salesforce domain URL.
2. You'll see a **BlockID** login option on the Salesforce sign-in screen. Click it.
3. You'll be redirected to the 1Kosmos AdminX login screen with a QR code.
4. On the 1Kosmos mobile app home screen, tap **Scan QR**.
5. Scan the QR code. When prompted, select **Allow only while using the app**.
6. Tap **Authenticate** and complete biometric verification (Touch ID, Face ID, or LiveID).
7. On success, you'll be logged in to Salesforce.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.1kosmos.com/integrations/authentication/pre-built-integrations/salesforce.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.