SSO Custom URL

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-04-2019 12:36 AM
Hi there,
I have two Identity providers ADFS & Azure with certain set of users using them respectively
Since most users uses ADFS therefore its the default and auto redirect IdP.
My client wants a separate and simple URL for Azure users so we came up with a custom URL such that if the user hits that URL it is going to point to Azure identity provider login page in SN to Authenticate
I have 2 questions on this:
1. Is this the correct approach? As my client don't want to use external login for this purposes
2. If the above approach is correct what are the changes required to be done in SN such that it points me to my Azure IdP page as it still points me to ADFS login
- Labels:
-
Best Practices
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-04-2019 12:47 AM
Hello Sachin,
You can have multiple IdPs setup in your instance and they can have any custom URLs that can be setup in the source SSO systems. You need to make sure that the IdP is updated with the metadata for your Azure SSO.
At a time you can have only a single autoRedirect Idp. For all other Idps, you will need to force users to redirect to the specific IDP by passing its SYS_ID in the URL parameters
Example URL to redirect
https://instance_name.service-now.com/login_with_sso.do?&glide_sso_id=SYS_ID_OF_IDP
Please refer documentation here
Thanks!

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-04-2019 12:52 AM
Thanks Alikutty
Understand and agree that's why we are using a custom URL1 lets say xxx.my-company.com to point to IdP URL2 that was constructed with the help of a sys_id of the Azure IdP record in the system
https://my-company.service-now.com/login_with_sso.do?glide_sso_id=xxx
Now my question is all this is done outside SN, i.e. getting the custom URL up by the DN Provider and pointing it to the URL2 above but are there any changes required to be done in SN as well? As after this setting it still points me to ADFS and NOT Azure
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-04-2019 02:07 AM
So when you redirect users to https://my-company.service-now.com/login_with_sso.do?glide_sso_id=xxx, it is still opening the ADFS SSO page?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-04-2019 03:31 AM
yes