FormAssembly + Salesforce Community + Domain Certificate

    In my recent Experience Cloud implementation project I want to have the FormAssembly Form on the Community Pages. For the Salesforce community if you have the custom domain you should have uploaded the CA Singed Certificate. To know more about adding the custom domain please go through my previous blog by clicking here. 

    Generally when we add the domain we just add the default standard certificate provided by the authority. If you have this standard certificate then when you try to open the FormAssembly Form page on Community you will be redirected back to the login page. This is because of the SSL certificate issue.

    To know the SSL issue please run the SSL Server Test for the domain you registered on the Salesforce https://www.ssllabs.com/ssltest/analyze.html.  Once you ran the test you will see the chain issue as shown in the below screenshot.

Below is resolution from FormAssembly Support:

"SSL Labs shows that the server’s certificate chain is incomplete. This prevents our server from connecting and validating the user session (hence redirect to login page). In our other cases, it was necessary to reinstall the SSL Certificate."    

    To resolve this issue go the existing certificate linked against the domain on Salesforce and then click on Download Certificate Signing Request. Please pass this file to the certificate authority and ask them to create the new single PEM Encoded certificate by re uploading this CSR(Certificate Signing Request) file. Most of them misunderstand that this is should be .pem certificate but its not instead it has to be a .crt file. This certificate contain the information as mentioned in the below screenshot.

    Upload this new certificate on the existing Salesforce certificate by clicking 'Update Signed Certificate'. Once you uploaded, as per the Salesforce documentation allow minimum 1 hour for this new certificate to propagate on Salesforce infrastructure.

      

    Now if you re run the SSL server test for salesforce domain then you won't see the chain issue as None and the FormAssembly Form will be accessible on the community portal without redirecting back to the login page. 

    If you still have issue opening the FormAssembly Form on the community, please contact the FormAssembly.

I hope this information is helpful to you. Please leave your comment.