Paris Feature: Google OpenID Connect (OIDC) Configuration for ServiceNow Single Sign On (SSO)

[AbhishekGardade]

With Paris release, you can now create or update an OpenID Connect (OIDC) configuration using the Multi-Provider SSO plugin. If you have client ID, client secret, and well-known configuration URL of the identity providers like Google, Okta and you can directly import the OIDC configuration for SSO. After completing the configuration, users can log in to ServiceNow applications using Google.

In this blog post, I will explain how we can Login ServiceNow using Google sign in.

Prerequisites :

• Need to have Client ID, Client Secret, and Well-known configuration URL from Google IdP. Please check out the attached document to get these details.
• Activate Multi-Provider SSO plugin from Your Instance (ServiceNow Paris).

Once we have Client ID, Client Secret and Well-known configuration URL from Google, we can ready to configure our ServiceNow Instance.

I have provided you the step by step procedure to configure instance for enable for Sign in with google.

Steps to do :

1. Install below mentioned ServiceNow Plugin from by Navigating to System Applications > All Available Applications > All
   • Multiple Provider Single Sign-On Installer (com.snc.integration.sso.multi.installer)
   • e-Signature plugin (com.glide.e_signature_approvals)
2. Now configure Multi-Provider SSO properties:
3. In order to configure Identity provider(Google), Navigate to Multi-Provider SSO> Identity Providers-> click New > OpenID Connect.
4. You need to fill below information.
   • Name: Provide Unique name. Ex. Google Single Sign On
   • Client ID : your google client ID
   • Client Secret: your google client secret
   • Well-known configuration URL : https://accounts.google.com/.well-known/openid-configuration
5. Once you click on Import, it will directly import an OIDC configuration available and you will be redirected to the new Identity Provider created.
6. You will see below form. 
7. Make sure you configure below things on OIDC above form
   • ServiceNow Homepage: This should be same as Authorized Redirect URLs which you have configured in Google developers console
   • Show as Login option: TRUE
   • SSO label: Google (this will be displayed on your login screen)
   • Logo URL: Provide URL in case you want to show Icon
8. Make sure you have email available in ServiceNow user profile in order to login.
9. Finally, we are ready to Sign in with Google.
10. Once you provide your Credentials, you will be redirected to ServiceNow Instance Homepage.

                     

That's it for now!!!!  There are many things we can configure on it. For in-depth knowledge, please have a look at the release notes and ServiceNow Documentations.

• OpenID Connect (OIDC) configuration for Single Sign-On (SSO)
• Setting up Multi-Provider SSO
• Google Identity Platform : OpenID Connect

Thanks for reading and do comment with your suggestion and improvements. If I've missed something, please let me know so I can get it added .

Hope you will find it as helpful. Feel free to bookmark this post or mark it helpful..
Cheers,
Abhishek Gardade

Google OpenID Connect (OIDC) Configuration.docx