function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
zT68vIzT68vI 

Can a SAML service provider request authentication for a specific user?

I'm using Salesforce as a SAML identity provider. I'd like my service provider to be able to request authentication for a specific user. Ideally, Salesforce would show its log in screen if the specified user is not already authenticated, and prepopulate the username field with the username specified in the authentication request. The SAML 2.0 spec seems to support this functionality with a Subject element in the AuthnRequest. I added the following snippet: 
<saml:Subject>
    <saml:NameID>
        user@example.com
    </saml:NameID>
</saml:Subject>

However, Salesforce Identity doesn't seem to respect that element. Does Salesforce support authenticating a specific user? If so, how?

Thanks for the help.