Salesforce

Enable passwordless, biometric login for your Salesforce users using 1K as a SAML 2.0 Identity Provider. Once connected, users authenticate with Touch ID, Face ID, or LiveID instead of a password.

This integration does not support the Salesforce Sandbox edition. Use a Production instance.

---

Prerequisites

Before starting, make sure you have:

• AdminX portal — Admin access to your 1Kosmos AdminX tenant.
• Salesforce instance — Admin access with access to the Setup screen. (Sign up here if needed.)
• 1Kosmos mobile app — Installed and enrolled on iOS or Android. (Android · iOS)

  • Biometrics (Touch ID / Face ID or LiveID) must be enrolled before testing.

---

Step 1 — Configure Salesforce

Note: These steps are performed by your Salesforce administrator.

1. Sign in to Salesforce and go to Settings (gear icon) → Setup.
2. Copy and save your Salesforce domain URL (e.g., https://<your_domain>.my.salesforce.com).

Generate a Security Token

You'll need a security token to authenticate AdminX with Salesforce during setup.

1. Click your avatar → Settings → Reset My Security Token.
2. Click Reset Security Token. A new token will be emailed to you.
3. Copy and save the token from the email.

---

Step 2 — Connect Salesforce in AdminX

Note: These steps are performed by your AdminX administrator. Credentials entered here are one-time use only. 1Kosmos does not store them — rotate passwords and revoke tokens after setup.

1. Sign in to the AdminX portal and go to Applications → Add Application.
2. Under Pre-built integrations, click Add Integration on the Salesforce card.
3. Fill in the following fields:

   Field	Value
   Application Name	A display name for this integration
   Salesforce Domain	Your Salesforce domain URL (from Step 1)
   Salesforce Username	Your Salesforce admin username
   Salesforce Password	Your Salesforce admin password
   Salesforce Security Token	The token generated in Step 1

4. Click Connect.

AdminX automatically creates an SP configuration in Salesforce named BlockID and enables the SAML integration.

---

Step 3 — Post-Setup Salesforce Configuration (Optional)

These steps fine-tune the auto-generated SP configuration. Perform them in your Salesforce admin console.

Note: These steps are performed by your Salesforce administrator.

Enable SAML SSO

1. Go to Settings → Identity → Single Sign-On Settings.
2. Click Edit, check SAML Enabled, and click Save.

Update User Federation ID

Each user must have a Federation ID that matches their AdminX-linked email address.

1. Go to Administration → Users → Users.
2. Click Edit next to the relevant user.
3. Under Single Sign On Information, set Federation ID to the user's email address (the same email linked to the Salesforce app in AdminX).
4. Click Save.

Set Default Authentication to 1Kosmos

1. Go to Settings → Company Settings → My Domain → Authentication Configuration.
2. Click Edit.
3. Under Authentication Service, select the BlockID SSO instance.
4. Click Save.

---

Step 4 — Test the Connection

1. Open a browser and go to your Salesforce domain URL.
2. You'll see a BlockID login option on the Salesforce sign-in screen. Click it.
3. You'll be redirected to the 1Kosmos AdminX login screen with a QR code.
4. On the 1Kosmos mobile app home screen, tap Scan QR.
5. Scan the QR code. When prompted, select Allow only while using the app.
6. Tap Authenticate and complete biometric verification (Touch ID, Face ID, or LiveID).
7. On success, you'll be logged in to Salesforce.