function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
skience2nasu1.397564234839756E12skience2nasu1.397564234839756E12 

SSO

 We are setting up a SSO in Salesforce org with a Federated authentication where Salesforce is an Identity provider and our partner application is a Service provider. We were able to generate the SAML assertion to the Service Provider (IDP initiated login). Currently, the size of SAML assertion that is being generated is around 12 KB and our service provider cannot accommodate the assertion of this size. So we need to reduce the assertion size to 5 KB. Is there a way to reduce the assertion size?

  1. The service provider doesn’t need the certification information in the SAML assertion but the assertion should be signed. Is there an option in Salesforce to NOT to include the certificate information in the assertion?
  2. Is there a way in Salesforce to exclude the default attributes such as UserId, Username, Email and  Is_Portal_User being sent in the SAML assertion which are not required?

Thanks in advance!!!