Set Up Single Sign-On for Salesforce Agent

The process of setting up Single-Sign On (SSO) for Salesforce Agent (SFA) was updated in October 2022, with the creation of the new NICE CXone call center. This new call center is configured for global authentication. Now, you only need to set up SSO in CXone, configure the NICE CXone call center for your organization, and assign users to it. You no longer need to configure SSO in Salesforce.

Even if you already have SSO configured, you will need to follow the steps on this page to update to the new process. The old process will no longer work with the Spring 2023 release.

You can use the CXone built-in identity provider, Salesforce, or one of these third-party identity providers:

  • Ping

  • Okta

  • Active Directory

Once you follow the steps below to update, agents will no longer use the custom domain you configured for the old call centers to log in using SSO.

Complete each of these tasks in the order given.

Set up Single Sign-On in CXone

To set up Single Sign-On (SSO) for Salesforce Agent, you must first set up SSO in CXone. Based on your identity provider, complete one of the following:

Configure the NICE CXone Call Center

Once you've set up SSO in CXone, configure and assign users to the NICE CXone call center. This will enable SSO on the Salesforce side.

All Salesforce Agent users should be assigned to the NICE CXone call center. All of the other, older call centers should not be used and can be deleted.

  1. Click Setup in your account menu located in the top right corner.

  2. Use the Quick Find box to search for Call Centers, then click the Call Centers link.

  3. Review the information and click Continue.

  4. Click Edit next to the NICE CXone call center.

  5. In the NICE CXone Settings section, make sure the CXone System Issuer field has the appropriate value for your organization:

    • Non-FedRamp customers: https://cxone.niceincontact.com

    • CXone FedRamp Moderate customers: https://cxone-gov.niceincontact.com
  6. Optional: Enter the Tenant ID of your CXone account in the CXone Tenant Id field. This will:

    • Hide the Use Company Domain option from agents when they're logging in.

    • Display the external login authenticator configured for your tenant.

    You can ask your CXone Account Representative for the CXone Tenant ID.

  7. Make sure the URL you entered for CXone System Issuer in step 5 is configured in Remote Site Settings.

    1. Use the Quick Find box to search for Remote Site Settings, then click Remote Site Settings.

    2. Select NICEinContact.

    3. Click Edit.

    4. In the Remote Site URL field, enter your CXone System Issuer URL.

    5. Click Save.

Assign Users to the NICE CXone Call Center

After modifying the call center definition, you must assign users to the NICE CXone call center. You can do this by modifying the call center or modifying individual users.

Modify the Call Center

  1. Click Setup in the upper right corner.

  2. Use the Quick Find box to search for Call Centers, then click Call Centers.

  3. If the Say Hello to Salesforce Call Center screen appears, click Continue.

  4. Select the NICE CXone call center. Do not click Edit next to the call center name.

  5. In the Call Center Users section, click Manage Call Center Users.

  6. Click Add More Users. Search for users by configuring the filter fields and clicking Find.

  7. When the search results appear, check the box next to the users you want to add, then click Add to Call Center.

Modify Individual Users

  1. Click Setup in the upper right corner.

  2. Use the Quick Find box to search for Users, and then click Users.

  3. Click Edit next to the user you want to add to the call center.

  4. Scroll down to the bottom right part of the General Information section. Enter NICE CXone in the Call Center field, or use the search button to search for configured call centers.

  5. Click Save.