Set Up Single Sign-On for Salesforce Agent

The process of setting up Single-Sign On (SSO) for Salesforce Agent (SFA) was updated in October 2022, with the creation of the new CXone Mpower call center. This new call center is configured for global authentication. Now, you only need to set up SSO in CXone Mpower, configure the CXone Mpower call center for your organization, and assign users to it. You no longer need to configure SSO in Salesforce.

Even if you already have SSO configured, you will need to follow the steps on this page to update to the new process. The old process will no longer work with the Spring 2023 release.

You can use the CXone Mpower built-in identity provider, Salesforce, or one of these third-party identity providers:

  • Ping

  • Okta

  • Active Directory

Complete each of these tasks in the order given.

Set up Single Sign-On in CXone Mpower

To set up Single Sign-On (SSO) for Salesforce Agent, you must first set up SSO in CXone Mpower. Based on your identity provider, complete one of the following:

Configure the CXone Mpower Call Center

Once you've set up SSO in CXone Mpower, configure and assign users to the CXone Mpower call center. This will enable SSO on the Salesforce side.

All Salesforce Agent users should be assigned to the CXone Mpower call center. All of the other, older call centers should not be used and can be deleted.

  1. Click Setup in your account menu located in the top right corner.

  2. Use the Quick Find box to search for Call Centers, then click the Call Centers link.

  3. Review the information and click Continue.

  4. Click Edit next to the CXone Mpower call center.

  5. In the CXone Mpower Settings section, make sure the CXone Mpower System Issuer field has the appropriate value for your organization:

    • Non-FedRamp customers: https://cxone.niceincontact.com

    • CXone Mpower FedRamp Moderate customers: https://cxone-gov.niceincontact.com
  6. Optional: Enter the Tenant ID of your CXone Mpower account in the CXone Mpower Tenant Id field. This will:

    • Hide the Use Company Domain option from agents when they're logging in.

    • Display the external login authenticator configured for your tenant.

    You can ask your Account Representative for the CXone Mpower Tenant ID.

  7. Make sure the URL you entered for CXone Mpower System Issuer in step 5 is configured in Remote Site Settings.

    1. Use the Quick Find box to search for Remote Site Settings, then click Remote Site Settings.

    2. Select NICEinContact.

    3. Click Edit.

    4. In the Remote Site URL field, enter your CXone Mpower System Issuer URL.

    5. Click Save.

Assign Users to the CXone Mpower Call Center

After modifying the call center definition, you must assign users to the CXone Mpower call center. You can do this by modifying the call center or modifying individual users.

Modify the Call Center

  1. Click Setup in the upper right corner.

  2. Use the Quick Find box to search for Call Centers, then click Call Centers.

  3. If the Say Hello to Salesforce Call Center screen appears, click Continue.

  4. Select the CXone Mpower call center. Do not click Edit next to the call center name.

  5. In the Call Center Users section, click Manage Call Center Users.

  6. Click Add More Users. Search for users by configuring the filter fields and clicking Find.

  7. When the search results appear, check the box next to the users you want to add, then click Add to Call Center.

Modify Individual Users

  1. Click Setup in the upper right corner.

  2. Use the Quick Find box to search for Users, and then click Users.

  3. Click Edit next to the user you want to add to the call center.

  4. Scroll down to the bottom right part of the General Information section. Enter CXone Mpower in the Call Center field, or use the search button to search for configured call centers.

  5. Click Save.