SSO through Service Portal Login Page

[sumana1707]

Dear Team,

We have 3 types of users in our organization.

1. Users in company domain having account in AD

2. Users outside company domain having account in AD

3. Local users having account only in ServiceNow NOT in AD

As per the requirement, we want the type 3 and type 2 users to validate through our customized service portal page while login to ServiceNow whereas the type 1 users will validate automatically without any login credentials.

Currently we have SSO enabled in our DEV instance and all the users are directed to ADFS page, which is not desired and we want service portal login page for local users instead of ADFS login page.

Is it feasible solution ? Please assist.

Regards,

Sumana

[mukulgupta]

Hi Sumana,

As per my understanding Type 1 and Type 2 together is difficult but you can test the following:

Considering users use the following similar URL to access ServiceNow:

https://<instance>.service-now.com/<custom_service_portal_page>

1) Set your <custom_service_portal_page> (eg. $sp ) to "true" under the sys_public table.

2) Empty the value of glide.authenticate.sso.redirect.idp sys_property if already exist. (DO NOT DELETE THE PROPERTY)

---- This will help Type 3 users to land on the ServiceNow local login page and not automatically get redirected to the ADFS login page thus getting authenticated via ServiceNow and not AD

3) For the Type 1 users to login without entering SSO login credentials you will need to set up Windows-based authentication for SSO and your IDP should also support the same.

Please see the Doc for setting up the same: (Workaround) Support Kerberos authentication

NOTE: These users will still need to successfully login atleast for the FIRST time via landing on the local login landing page and click "Use external login" for SOO authentication, this will save the sys_id of the identity provider records as a cookie (glide_sso_id cookie) in their browser. Once they have successfully logged in for the first time and then try to access the instance again from the time on then they will be successfully logged in via SSO without entering credentials for authentication.

4) Similarly with Type 2 users once they have successfully logged in for the first time then the cookie will be set on their browser and from then on they will be start getting redirected to the ADFS login page.

Please let us know if these steps help in achieving what you are looking for.

Best Regards,

Mukul Gupta