MCAS, Okta and Salesforce - Conditional Access

%3CLINGO-SUB%20id%3D%22lingo-sub-2282843%22%20slang%3D%22en-US%22%3EMCAS%2C%20Okta%20and%20Salesforce%20-%20Conditional%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2282843%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20MCAS%20Team%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20problem%20with%20connection%20between%20MCAS%2C%20Okta%20and%20Salesforce.%26nbsp%3BI%20did%20all%20steps%20from%20documentation%20(%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fproxy-idp-okta%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fproxy-idp-okta%3C%2FA%3E)%20but%20it%20doesn't%20work.%20I%20created%20custom%20application%20in%20Okta%20(for%20Salesforce)%20and%20SAML%20Single%20Sign-On%20configuration%20in%20Salesforce%20(for%20MCAS%20and%20Okta).%20At%20the%20end%20I%20have%20status%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22M_Nowak_0-1619194502194.png%22%20style%3D%22width%3A%20373px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F275064iD9A4AF11352C842E%2Fimage-dimensions%2F373x56%3Fv%3Dv2%22%20width%3D%22373%22%20height%3D%2256%22%20role%3D%22button%22%20title%3D%22M_Nowak_0-1619194502194.png%22%20alt%3D%22M_Nowak_0-1619194502194.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EWhen%20I%20try%20to%20login%20to%20Salesforce%20I%20see%20this%20information%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22M_Nowak_1-1619194570660.png%22%20style%3D%22width%3A%20263px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F275065iFC72ED3EA35D945C%2Fimage-dimensions%2F263x137%3Fv%3Dv2%22%20width%3D%22263%22%20height%3D%22137%22%20role%3D%22button%22%20title%3D%22M_Nowak_1-1619194570660.png%22%20alt%3D%22M_Nowak_1-1619194570660.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBut%20when%20I%20click%20%22Continue%20to%20Salesforce%22%20I%20can't%20access%20to%20Salesforce.%20I%20see%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22M_Nowak_2-1619194596446.png%22%20style%3D%22width%3A%20255px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F275066i12A028B1C2D7C39B%2Fimage-dimensions%2F255x179%3Fv%3Dv2%22%20width%3D%22255%22%20height%3D%22179%22%20role%3D%22button%22%20title%3D%22M_Nowak_2-1619194596446.png%22%20alt%3D%22M_Nowak_2-1619194596446.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EIn%20MCAS%20I%20see%20logs%20about%20this%20activity%20(so%20I%20think%20that%20this%20connection%20should%20work)%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22M_Nowak_5-1619194843912.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F275069i16E6363939EFFF01%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22M_Nowak_5-1619194843912.png%22%20alt%3D%22M_Nowak_5-1619194843912.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDid%20anyone%20tried%20to%20connect%20these%20services%3F%20Do%20you%20have%20any%20advices%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2282843%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
New Contributor

Hello MCAS Team,

 

I have problem with connection between MCAS, Okta and Salesforce. I did all steps from documentation (https://docs.microsoft.com/en-us/cloud-app-security/proxy-idp-okta) but it doesn't work. I created custom application in Okta (for Salesforce) and SAML Single Sign-On configuration in Salesforce (for MCAS and Okta). At the end I have status:

M_Nowak_0-1619194502194.png

When I try to login to Salesforce I see this information: 

M_Nowak_1-1619194570660.png

 

But when I click "Continue to Salesforce" I can't access to Salesforce. I see:

M_Nowak_2-1619194596446.png

In MCAS I see logs about this activity (so I think that this connection should work):

M_Nowak_5-1619194843912.png

 

Did anyone tried to connect these services? Do you have any advices?

0 Replies