Externalization of some parts of the ServiceNow Platform

[suvro]

Hi Team,

We have created a new application using App Engine Studio. We have created a workspace for the HR Admins to manage the things.

Now for the 2nd phase they are planning to give access to external users. 

For which Customer wants their user records in AD and use SSO.

But they will be accessing the ServiceNow from anywhere ...not from Client's Device ...not using their VPN ...But they want them to login via SSO and access only certain things on the platform.

So I was thinking of creating a variant of workspace for those users. But how we can make sure they login from anywhere via SSO and have access only to that workspace variant page that we will create for them.

1. Is it possible ?

2. If Yes, what all things we have to do to make it possible

Thanks and Regards,

Suvro

[Ankur Bawiskar]

@suvro 

external users come into picture when it's CSM (customers, partners etc)

But you are referring here for HR agents

So what's the actual application they are planning to use?

Also AD and SSO makes sense for internal employees who are supporting the users and not for the external users

Why to have technical debt to onboard those external users in AD? Not a valid requirement.

If my response helped please mark it correct and close the thread so that it benefits future readers.

[suvro]

Hi @Ankur Bawiskar ,

It is custom application created through App Engine Studio.

I also agree, it does not makes sense.  

But client wants external Vendors and Coaches to access specific parts of ServiceNow ....using SSO but from anywhere without VPN.

They are keen on giving them access to  workspace.

Any workaround ? OR additional configuration OR additional Development that can be done to achieve this?

[Ankur Bawiskar]

@suvro 

Sorry but I don't agree with what's proposed.

Onboarding external users to AD and have SSO to them -> not a valid use-case

Please inform the architect about this and let that person think of the workaround or discuss with the technology team of customer about how to handle this.

If my response helped please mark it correct and close the thread so that it benefits future readers.