To integrate Cornell SSO with Salesforce:

1. Get Cornell Identity Provider Certificate. You'll need it in Salesforce SAML Single Sign-on Setting page.
2. In Salesforce SAML Single Sign-on setting page, under SAML Identity Location, make sure "Identity is in the NameIdentifier element of the Subject statement" is checked.
3. Send your salesforce's metadata to idmgmt@cornell.edu