Resolving SSO Login Issues When Updating Connection Tokens

Overview

When updating an organization token in Flosum Global Settings, Single Sign-On (SSO) may cause Global Settings to authenticate with the currently logged-in SSO user instead of the designated service user account.

Best Practice

Flosum strongly recommends using a dedicated service user account, not configured for SSO, to connect Salesforce orgs to any Flosum product.

If your dedicated service user is not configured for SSO, you may need to adjust the login URL to ensure Global uses the correct account.

How to Resolve

The instructions are written for the Chrome browser, but you may be able to complete the process in another browser. Chrome is recommended.

1

Monitor Network Activity

1. Open your Chrome browser and log in to Global Settings.

2. Click the Three Dots menu.

3. Click More Tools > Developer Tools.

   
4. Select the Network tab.

   

2

Update Token

1. Log in to Global Settings. See the Log In To Global Settings article for more instructions.

2. Click Connections from the sidebar menu.

3. Click Update Token for the connection you want to update.

   

3

Capture the Authorization URL

1. Watch for a network entry that begins with authorize.

2. As soon as you see it, press ESC to stop the browser from refreshing.

3. This prevents the redirect and allows you to capture the login URL.

   

4

Modify the Login URL and Authenticate

1. Copy the captured URL and paste it into the browser.

2. Replace the custom domain portion with one of the following:

Salesforce Org Type	Domain
Sandbox orgs	test.salesforce.com
Production orgs	login.salesforce.com

1. Keep the rest of the URL unchanged.

2. Press Enter to launch the URL.

3. Log in using the dedicated service user’s credentials (not the SSO account).

5

Confirm Connection Username

1. Return to Global Settings.

2. Click Connections from the sidebar menu.

3. Verify that the dedicated service user now shows under the Username for the connected org.