Create a Service Provider
- Login to the DualShield Administration Console
- Navigate to “SSO | Service Providers”
- Click the “+ CREATE” button in the toolbar
- At the 'SSO Server' drop-down, select "Single Sign-on Server"
- Drop down 'Application' then select the Application name, created previously.
- Enter an appropriate Name for this Service Provider.
- 'Type' should be set as "SAML 2.0"
- Select tickbox "Sign on SAML Assertion"
![DualShield MFA Platform > Service Provider [SF] > image-2024-12-2_15-12-25.png](/download/attachments/35946998/image-2024-12-2_15-12-25.png?version=1&modificationDate=1733152340238&api=v2)
- Click the 'CREATE METADATA' button. Paste the SalesForce MetaData saved earlier, in to the large textbox displayed.
- Then click "SAVE" to apply.
- Select the 2nd tab named "Attributes"
![DualShield MFA Platform > Service Provider [SF] > image-2024-12-2_15-19-4.png](/download/attachments/35946998/image-2024-12-2_15-19-4.png?version=1&modificationDate=1733152738602&api=v2)
- Click "+ CREATE" button to add a new Attribute
- Set 'Location' as "HTTP Body"
- Enter in the 'Name' field the attribute "loginName"
- 'Format' set from the drop-down as "attrname-format:uri"
- Within 'Value' set as "Maps to an identity attribute", then click the magnifying glass, and locate "Email".
Assuming that your SalesForce loginname is your email address,
![DualShield MFA Platform > Service Provider [SF] > image-2024-12-2_15-26-21.png](/download/attachments/35946998/image-2024-12-2_15-26-21.png?version=1&modificationDate=1733153175926&api=v2)
- Then select "SAVE" to confirm.
- Now at the primary Service Provider window, drop-down 'NameID Format' and select "Maps to the following attribute"
- In the next field 'Attribute" you will find the custom attribute created, "loginName". Select it.
![DualShield MFA Platform > Service Provider [SF] > image-2024-12-2_15-32-8.png](/download/attachments/35946998/image-2024-12-2_15-32-8.png?version=1&modificationDate=1733153523692&api=v2)
- Finally click "SAVE" to create this Service Provider entry.