Configuring SSO

[tiagomacul]

 Configuring SSO

Image	Description
	01. Acess Guided Setup https://<instance>.service-now.com/nav_to.do?uri=%2Fhome.do%3F
	02. ITSM Guided Setup
	03. Click Get Started
	04.
	05. Click Activate/Repair
	06. Click Activate
	07. Close &  Reload Form
	08. Click Add New IdP
	09.  Type your informations Example www.<website>.com.br/FederationMetadata/2007-06/FederationMetadata.xml
	10. Click Fetch
	11. Click Save
	12. Click Generate metada
	13. On the NameID Policy  urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
	14. Click >> Mult-Provider SSO > Properties
	15. Select  Enable multiple provider SS Enable debug logging for the multiple provider SSO integration The field on the user table that identifies a user accessing the "User identification" login page. By default, it uses the 'user_name' field.
	16. >>AD FS > Trust Relationships > Relaying Party Trust >Add Relaying Party Trust
	17. Click Start
	18. Import data about the Relaying party from a file Browse
	19. Type Display name, click Next
	20. Select I do not want to configure mult-facto authentication settings for this relaying party trust at this time Click Next
	21. Click Permit all users to access this Relaying Party and click Next
	22. Click Close
	23. An example about Claim Rule E-mail Address
	24. Click OK
	25. Click Test Connection
	26. Login
	27. Set Default
	28. Set Auto Redirect Idp
	29.

Metadata Sample.xml, step 13.

<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://<instance>.service-now.com">
 	<SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
		<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://<instance>.service-now.com/navpage.do"/>
		<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
		<AssertionConsumerService isDefault="true" index="0" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://<instance>.service-now.com/navpage.do" />
		<AssertionConsumerService isDefault="false" index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://<instance>.service-now.com/consumer.do" />
	</SPSSODescriptor>
</EntityDescriptor>

Author:

Tiago Macul

Paulo Cesar dos Santos Filho

Haddan de Queiroz Rocha

Summary

 Configuring ADFS Claim rules

[User674366]

Thanks for sharing this.