Skip to Main Content
Status Shipped
Categories Salesforce
Created by Erin Ward
Created on Feb 28, 2023

Associate the Salesforce Account ID with Aha! ideas portal users via SSO

Some of my customers work for large organizations that we have broken down into many accounts in Salesforce. The customers who access the idea portal are associated directly with the Salesforce account and that account might have the same email domain associated with it as other Salesforce accounts. In these examples, mapping the SF email domain to the Aha! org email domain doesn't work as it pulls in all portal users for the larger organization, rather than those directly associated with the account. In these instances, I'd like to tie the portal user directly to their Salesforce account by syncing over the account ID.

  • ADMIN RESPONSE
    Jan 3, 2024

    SAML SSO for ideas portals now supports sending an organization assignment for the user.

    If you are using Salesforce community as a SAML identity provider, you can update your SAML configuration in Salesforce to include attributes:

    • organization_ids : the 18 character Salesforce account_id that the user belongs to.

    • salesforce_integration_id: the Aha! ID for your Salesforce integration (found in the URL when you configure your integration in Aha! settings)

    If you are using another tool as your SAML identity provider, you can

    • Add a custom field to your organization custom field layout. Set API key = "external_id"

    • Update your SAML configuration to include the attribute: organization_ids . This should be set to your unique id for the account that the user belongs to.


    Now when a portal user logs in through SAML SSO, Aha! will

    • Assign this user to the organization in Aha! that has this organization_id

    • If an organization does not already exist in Aha!, a new one will be created

    • If you send the salesforce integration id, the organization will be automatically linked to Salesforce and any mapped organization fields will be synced.


    Available with Ideas Advanced.

  • Attach files
  • Marianne Gutshall
    Reply
    |
    Jan 3, 2024

    Just saw this update and adding a ticket to our IT backlog now- Thanks!

  • Mary Vanausdale
    Reply
    |
    Jun 21, 2023

    This is critical to our organization. Again, because using domain, rather than a salesforce/account ID leads to inaccurate linking of users to accounts where there is a govt/natl dept or NGO involved that can use a common domain - but have many different branches, and offices, and therefore multiple accounts. Specific examples include the NHS in the UK, or branches of US military - both examples may have unique domains, but also have employees utlilizing a generic domain (ie "nhs.net").

    Similar to the comment below, our users are set up associated to the correct account - and we need that account (and only that account) to reflect when we pull reports for ideas revenue, or more importantly when our CRMs pull customer specific reports for customer calls - they need to be confident they're speaking to the correct contact/account about the correct issues.

    Happy to provide specific examples, or further detail on use cases as needed.

  • Marianne Gutshall
    Reply
    |
    Apr 14, 2023

    This request is very important to my organization as well. We are unable to pull accurate reporting for ideas based on the business value / ACV of the requesting customers because the linking to the correct Salesforce organization via domain is inaccurate for us.

    Rather, we know each user (login is required to participate in our ideas portal) and would like to be able to reliably associate the contact to the correct organization (based on mapping the organization ID and from the contact's account). Without this ID-based contact to org mapping, our aha! idea reporting is wildly inaccurate for PMs to report on # of organizations and corresponding ACV associated with the newly requested feature/idea.

  • +1