Common SSO issues with Salesforce.com

If you're using BI OnDemand (BIOD) or crystalreports.com (CRDC) in Salesforce.com, you may run into some SSO issues if you don't have salesforce.com configured correctly.

Here are some configurations that you can troubleshoot:

1. If the Salesforce.com email address doesn't match the BIOD/CRDC email address, the SSO won't work. Make sure the SFDC email address and BIOD/CRDC email match. Most think the SFDC username is the same as the SFDC email address, but that's not the case.

2. Add the IP address ranges of BIOD/CRDC to SFDC. Otherwise, the BIOD/CRDC reports won't be able to refresh or be scheduled against SFDC. The IP addresses we use today from BIOD/CRDC are:

207.240.250.0 207.240.250.255

207.240.254.0 207.240.254.255

3. If you enable the "Lock sessions to the IP address from which they originated" setting in SFDC under Setup, Security Controls, Session Settings, the SSO won't work between SFDC and BIOD/CRDC. Make sure this is unchecked.

Edited by: Tony Foster on Feb 10, 2012 9:06 AM