SAML Assertion Flow
- Before anything else, ensure that SAML is configured for your org. SAML version 2.0 is required.
- Once you have SAML configured, exchange a SAML assertion for an access token.
- Salesforce sends the response.
- Use a JSON parser to process the response and extract the access token. Note a refresh_token is never issued in this flow.