PEC-GPA/Current/Administrator/GPlusSSO90 - Revision history

WikiSysop at 17:47, August 30, 2022

2022-08-30T17:47:59Z

WikiSysop at 19:20, July 28, 2022

2022-07-28T19:20:03Z

Matthew.west@genesys.com: Published

2021-11-19T13:48:40Z

Published

Ed.jamer@genesys.com: Text replacement - "Genesys Cloud" to "Genesys Cloud CX"

2021-11-09T21:28:30Z

Text replacement - "Genesys Cloud" to "Genesys Cloud CX"

Matthew.west@genesys.com: Published

2021-07-23T17:12:44Z

Published

Matthew.west@genesys.com: Published

2021-07-22T15:43:11Z

Published

Mwest: Published

2020-09-17T18:37:39Z

Published

WikiSysop: Text replacement - "\|Platform=([^\|])GenesysEngage-onpremises([\|])" to "|Platform=$1GenesysEngage-cloud$2"

2020-07-25T02:32:03Z

Text replacement - "\|Platform=([^\|]*)GenesysEngage-onpremises([\|]*)" to "|Platform=$1GenesysEngage-cloud$2"

WikiSysop: Text replacement - "PureCloud" to "Genesys Cloud"

2020-07-15T12:05:40Z

Text replacement - "PureCloud" to "Genesys Cloud"

WikiSysop: Text replacement - "\|Platforms?=([^\|])PureEngage([\|])" to "|Platform=$1GenesysEngage-onpremises$2"

2020-07-15T11:45:02Z

Text replacement - "\|Platforms?=([^\|]*)PureEngage([\|]*)" to "|Platform=$1GenesysEngage-onpremises$2"

@@ Line 6: / Line 6: @@
 |ComingSoon=No
 |Platform=GenesysEngage-cloud
 |Section={{Section
 |alignment=Vertical

@@ Line 22: / Line 22: @@
 |alignment=Vertical
 |structuredtext=To configure Gplus Adapter with SSO and your own Identity Provider (IDP), perform the following steps:
-<ul><li><p>Ensure that SSO for Agent Desktop release 9 has been enabled in your environment by following the instructions in the {{Link-AnywhereElse|product=PEC-AS|version=Current|manual=ManageCC|topic=Single_Sign-On|display text=Agent Setup SSO article}} and the {{Link-AnywhereElse|product=PEC-Admin|version=Current|manual=Admin|topic=SSO|display text=Single Sign-On article}}.</p></li><li><p>To ensure that your IDP page is not blocked by the browser and successfully opens in the Gplus Adapter iframe, verify your IDP response headers configuration:
+<ul><li><p>Ensure that SSO for Agent Workspace release 9 has been enabled in your environment by following the instructions in the {{Link-AnywhereElse|product=PEC-AS|version=Current|manual=ManageCC|topic=Single_Sign-On|display text=Agent Setup SSO article}} and the {{Link-AnywhereElse|product=PEC-Admin|version=Current|manual=Admin|topic=SSO|display text=Single Sign-On article}}.</p></li><li><p>To ensure that your IDP page is not blocked by the browser and successfully opens in the Gplus Adapter iframe, verify your IDP response headers configuration:
 <ul>

@@ Line 30: / Line 30: @@
 <BLOCKQUOTE>Content-Security-Policy: frame-ancestors 'self' <nowiki>https://*.genesyscloud.com https://*.lightning.force.com;</nowiki></BLOCKQUOTE>
 <p>For example (Classic):</p>
-<BLOCKQUOTE>Content-Security-Policy: frame-ancestors 'self' <nowiki>https://*.genesyscloud.com https://*.slaesforce.com;</nowiki></BLOCKQUOTE>
+<BLOCKQUOTE>Content-Security-Policy: frame-ancestors 'self' <nowiki>https://*.genesyscloud.com https://*.salesforce.com;</nowiki></BLOCKQUOTE>
 </li>
 <li><p>For the Internet Explorer 11 browser:</p>

@@ Line 135: / Line 135: @@
 *[https://developer.salesforce.com/docs/atlas.en-us.externalidentityImplGuide.meta/externalidentityImplGuide/external_identity_provide_sso.htm Salesforce guide]
 *[http://salesforce.vidyard.com/watch/I6j0O6jqr8ZTtoj5Wm_Fjg Video example from Salesforce]
-<!--* [https://help.mypurecloud.com/articles/about-single-sign-on-sso/ Example of the same SSO implementation in Genesys Cloud]-->
+<!--* [https://help.mypurecloud.com/articles/about-single-sign-on-sso/ Example of the same SSO implementation in Genesys Cloud CX]-->
 |Status=No
 }}
 }}

@@ Line 95: / Line 95: @@
 </ul>
 </li></ol>
-If you configure '''enforceAuthN''' in SAML authentication requests as described in {{Link-AnywhereElse|product=PEC-Admin|version=Current|manual=Admin|topic=SSO|anchor=saml|display text=SAML settings}}, Salesforce will ignore it.
+Salesforce does not take into account configuration of '''enforceAuthN''' in SAML authentication requests as described in {{Link-AnywhereElse|product=PEC-Admin|version=Current|manual=Admin|topic=SSO|anchor=saml|display text=SAML settings}}.
 {{AnchorDiv|ConnectedApp}}
 ===Define Gplus Adapter as a Connected App in Salesforce===

@@ Line 84: / Line 84: @@
 <li>Follow the steps in the [https://help.salesforce.com/articleView?id=identity_provider_enable.htm Enable Salesforce as an Identity Provider] article in the '''Salesforce Help'''.</li>
 <li>In the '''Identity Provider''' view, click '''Download Metadata''' to obtain a copy of the IDP metadata XML.</li>
-</ol>
+</ol><br />{{AnchorDiv|SSOonTenant}}
 ===Enable SSO on Genesys tenants===
 <ol>
@@ Line 95: / Line 94: @@
 <li>'''Show Change Account Link'''</li>
 </ul>
-</li>
+</li></ol>
-</ol>
+If you configure '''enforceAuthN''' in SAML authentication requests as described in {{Link-AnywhereElse|product=PEC-Admin|version=Current|manual=Admin|topic=SSO|anchor=saml|display text=SAML settings}}, Salesforce will ignore it.
 {{AnchorDiv|ConnectedApp}}
 ===Define Gplus Adapter as a Connected App in Salesforce===

@@ Line 6: / Line 6: @@
 |ComingSoon=No
 |Platform=GenesysEngage-cloud
 |Section={{Section
 |alignment=Vertical
-|Media=
+|structuredtext=You can configure Gplus Adapter to use either your own IDP or Salesforce as an IDP. You can choose one of these two options:
-|image=
+<ol>
-|structuredtext=You can configure Gplus Adapter to use either your own IDP or Salesforce as an IDP. You can choose one of these two options:<ol><li>'''Gplus Adapter configured with SSO and your own Identity Provider (IDP)'''.<ul><li>Ensure that SSO for Agent Desktop release 9 has been enabled in your environment by following the instructions in the {{Link-AnywhereElse|product=PEC-AS|version=Current|manual=ManageCC|topic=Single_Sign-On|display text=Agent Setup SSO article}} and the {{Link-AnywhereElse|product=PEC-Admin|version=Current|manual=Admin|topic=SSO|display text=Single Sign-On article}}.</li>
+<li><p>'''Gplus Adapter configured with SSO and {{Link-SomewhereInThisVersion|manual=Administrator|topic=GPlusSSO90|anchor=OwnIDP|display text=your own Identity Provider (IDP)}}'''.</p>
-<li>To ensure that your IDP page is not blocked by the browser and successfully opens in the Gplus Adapter iframe, verify your IDP response headers configuration:
+<li>
 <ul>
-<li>For the Chrome, Firefox, and Microsoft Edge browsers:
+<li>
-<br />
+<p>For the Chrome, Firefox, and Microsoft Edge browsers:</p><p>If the IDP server response contains the obsolete '''X-Frame-Options''' header, consider replacing it with the '''Content-Security-Policy''' header setting.</p>
-If the IDP server response contains the obsolete '''X-Frame-Options''' header, consider replacing it with the '''Content-Security-Policy''' header setting.
+<p>For example (Lightning):</p>
 <BLOCKQUOTE>Content-Security-Policy: frame-ancestors 'self' <nowiki>https://*.genesyscloud.com https://*.lightning.force.com;</nowiki></BLOCKQUOTE>
 </li>
-<li>For the Internet Explorer 11:
+<li><p>For the Internet Explorer 11 browser:</p>
-<br />
+<p>If IDP server response contains '''X-Frame-Options''' header, add '''ALLOW-FROM URI''' to the header setting.</p><p>For example (Lightning):</p>
 <BLOCKQUOTE>X-Frame-Options: ALLOW-FROM <nowiki>https://<your-server-name>.genesyscloud.com/ https://<your-server-name>.lightning.force.com/;</nowiki></BLOCKQUOTE>
 </li>
 </ul>
 </li>
-<li>For SSO logout configuration, use the following Agent Setup Desktop {{Link-AnywhereElse|product=PEC-AS|version=Current|manual=ManageCC|topic=Global_Login|display text=Global Login}} options:<ul><li>'''Invalidate Auth SSO session on Workspace logout'''</li><li>'''Show Change Account Link'''</li></ul></li><li>Adapter is now ready to use with SSO.</li></ul></li><li>'''Gplus Adapter integrated with {{Link-SomewhereInThisVersion|manual=Administrator|topic=GPlusSSO90|anchor=SFSSO|display text=Salesforce SSO as the IDP}}'''.
+<li><p>Adapter is now ready to use with SSO.</p></li></ul>
 |Status=No
 }}{{Section
@@ Line 44: / Line 66: @@
 |anchor=SFSSO
 |alignment=Vertical
 |structuredtext=You can simplify your agent log in process by integrating Gplus Adapter with Salesforce to use Salesforce as your single sign-on (SSO) identity provider (IDP). This means that your agent only has to provide their Username and Tenant to log in to Gplus Adapter after they have logged into Salesforce using Salesforce as your SSO identity provider.
@@ Line 52: / Line 72: @@
 #{{Link-SomewhereInThisManual|topic=GPlusSSO90|anchor=IDP|display text=Enable Salesforce as an Identity Provider}}
 #{{Link-SomewhereInThisManual|topic=GPlusSSO90|anchor=ConnectedApp|display text=Define Gplus Adapter as a Connected App in Salesforce}}
-<!--
+<!--{{NoteFormat|SSO is applicable to both test and production environments. Genesys recommends that you test SSO in your testing environment before using it in a production environment.|1}}-->
 ===Enable Salesforce as an Identity Provider===
@@ Line 61: / Line 80: @@
 *User email address (username) that you use to login to Salesforce. '''Note:''' Username email addresses must be the same in both Salesforce and Gplus Adapter.
 {{AnchorDiv|IDP}}
 ====Enable Salesforce as an Identity Provider====
 <ol>
@@ Line 80: / Line 98: @@
 </ol>
 {{AnchorDiv|ConnectedApp}}
 ===Define Gplus Adapter as a Connected App in Salesforce===
 <ol>
@@ Line 96: / Line 113: @@
 <li>Entity ID: The long string of numbers and letters at the end of the '''Location''' parameter URL after the last "/". </li>
 <li>ACS URL: The URL from the '''Location''' parameter that you obtained from the SP-Metadata in step 2 of the ''Enable SSO on Genesys tenants'' procedure.</li>
 </ul>
 </li>
 <li>Use the [https://help.salesforce.com/articleView?id=identity_provider_error_log.htm&type=5 identity provider event log] to troubleshoot errors when trying to log in to Gplus Adapter.</li>
@@ Line 117: / Line 137: @@
 *[http://salesforce.vidyard.com/watch/I6j0O6jqr8ZTtoj5Wm_Fjg Video example from Salesforce]
 <!--* [https://help.mypurecloud.com/articles/about-single-sign-on-sso/ Example of the same SSO implementation in Genesys Cloud]-->
 |Status=No
 }}
 }}

@@ Line 5: / Line 5: @@
 |Context=You can configure Gplus Adapter to use either your own IDP or Salesforce as an IDP.
 |ComingSoon=No
-|Platform=GenesysEngage-onpremises
+|Platform=GenesysEngage-cloud
 |Prereq=
 |Section={{Section

@@ Line 116: / Line 116: @@
 *[https://developer.salesforce.com/docs/atlas.en-us.externalidentityImplGuide.meta/externalidentityImplGuide/external_identity_provide_sso.htm Salesforce guide]
 *[http://salesforce.vidyard.com/watch/I6j0O6jqr8ZTtoj5Wm_Fjg Video example from Salesforce]
-<!--* [https://help.mypurecloud.com/articles/about-single-sign-on-sso/ Example of the same SSO implementation in PureCloud]-->
+<!--* [https://help.mypurecloud.com/articles/about-single-sign-on-sso/ Example of the same SSO implementation in Genesys Cloud]-->
 |structuredtextwide=
 |FAQHeading=

PEC-GPA/Current/Administrator/GPlusSSO90 - Revision history

WikiSysop at 17:47, August 30, 2022

WikiSysop at 19:20, July 28, 2022

Matthew.west@genesys.com: Published

Ed.jamer@genesys.com: Text replacement - "Genesys Cloud" to "Genesys Cloud CX"

Matthew.west@genesys.com: Published

Matthew.west@genesys.com: Published

Mwest: Published

WikiSysop: Text replacement - "\|Platform=([^\|]*)GenesysEngage-onpremises([\|]*)" to "|Platform=$1GenesysEngage-cloud$2"

WikiSysop: Text replacement - "PureCloud" to "Genesys Cloud"

WikiSysop: Text replacement - "\|Platforms?=([^\|]*)PureEngage([\|]*)" to "|Platform=$1GenesysEngage-onpremises$2"

WikiSysop: Text replacement - "\|Platform=([^\|])GenesysEngage-onpremises([\|])" to "|Platform=$1GenesysEngage-cloud$2"

WikiSysop: Text replacement - "\|Platforms?=([^\|])PureEngage([\|])" to "|Platform=$1GenesysEngage-onpremises$2"