I came across a requirement to disable multi-sso during upgrade & redirect users to a custom maintenance page when the system is upgrading.
I remember using the below link while I was upgrading before, however this doesn't seem to work in my current instance which is in Kingston.
https://www.servicenowguru.com/system-definition/custom-login-validation-installation-exits/
So, I decided to go with a workaround.
Prerequisite:
Please create a custom account with admin rights to get into the system via login.do when the SSO is disabled.
WorkAround:
Step 1: Create the new maintenance page
1. Navigate to Service Portals-> Pages->New
2. Save the page with a Tile & an ID & check the public box
3. Open the page in designer & add the widget for maintenance that you have created.
Step 2: Add the page created on Step 1 as a public page
1. Navigate to System Definition -> Public Pages
2. Add the page created in step 1 as a public page.
Step 3: Configure SSO Properties to set the logout url
1. Navigate to Multi-Provider SSO -> Identity Providers
2. Click the IDP you want to disable.
3. Modify the below 2 fields to contain the url of the page you created in Step 1
Step 4: Disable SSO
Actually, in this step we are not disabling the SSO, but modifying it with a wrong value so that the login fails.
1. As you know ServiceNow will not allow us to save anything on the SSO record without running the "Test Connection", we have to disable this functionality.
2. Go to System Definition->Business Rules & disable the below BR
3. Navigate to the IDP record from Multi-Provider SSO -> Identity Providers
4. Click on the Advanced tab, and change the value of the User Field to email1 instead of email(you may have a separate value here instead of email, just need to put a wrong value)
5. Save the record.
6. Try to login again via SSO, it should redirect you to the custom maintenance page.
