Salesforce questions for Dennis

Ben, This is my first time setting up an SSO authentication so we are both new at this, although there is a wealth of information and support networks that I have tapped into to configure a number of complicated integrations with Salesforce and I'm pretty confident we can figure this out.  I have been doing a lot of research and digging into this to see what our options are and have uncovered some great stuff . . .  I agree that setting up the SSO authentication with the Salesforce BIT Community as the identity provider and Drupal as service provider is step one and probably ends there.  We will be manually authorizing and granting Salesforce BIT Community licenses and not permitting self-registration.  As part of this, we need to figure out how BIT_User will create/grant a license/login credentials when a new Salesforce user is created or if this is even necessary. I'm beginning to think that the SSO authentication is more of the final step instead of one of the first steps.  I agree that an API or OAuth connection is necessary.  Configuring a Saleforce Connected App may be an option and where we need to start.  I have not worked with Drupal, but there is an integration called Salesforce Suite module which creates a connected app within Salesforce where we should be able to map and pass information back and forth based on our needs.  I really don't see much information needing to be transferred other than the level of access the user needs to various areas within BIT_User interface and documentation.      Let's set up a time to chat to talk this through further. Thank you!   Dennis