In today's world, companies often use multiple Identity Providers (IDPs) for signing into their applications. ServiceNow provides the ability to integrate with multiple IDPs for Single Sign-On (SSO) using either Secure Web Authentication or SAML protocols. However, how does ServiceNow identify the right IDP for each user and redirect them to the correct IDP? This can be done using the SSO Source field on the User table. The SSO Source field consists of the sys_id of the IDP configured and tested in the instance.
Note that all the configured IDPs should be active, and no auto-redirect IDP should be enabled(Value of glide.authenticate.sso.redirect.idp system property should be empty). When a user tries to log in to ServiceNow using the URL, the URL points to the public login page, which asks for credentials. With the Multiple Provider Single Sign-On Enhanced UI plugin, users can find a text link "Login with SSO." Clicking on this link takes the user to the “login_locate_sso.do” page where the user is only asked for their username. Once the user enters their username, ServiceNow queries the User table to retrieve the right SSO Source “sys_id”. Once retrieved, the user is redirected to the SSO login page of the IDP tagged to their user account.
However, one can bypass this step by making the “login_locate_sso.do” page the initial login page. This can be done using the following steps:
Step 1: Create a Script Include
- Log in to ServiceNow as an administrator.
- Navigate to System Definition > Script Includes.
- Click the New button to create a new Script Include.
- In the Name field, enter a name for the Script Include, for example, "LocateLoginSso."
- In the Script field, enter the following code:
var LocateLoginSso = Class.create();
LocateLoginSso.prototype = {
initialize: function() {},
redirectToSSO: function() {
return "/login_locate_sso.do";
},
type: LocateLoginSso
};
- Click the Submit button to save the Script Include.
Step 2: Update the System Property
- Navigate to System Properties> System.
- Find the “glide.entry.page.script” property and click the Edit button (Create the property if you don’t find it).
- In the Value field, enter the following code:
new LocateLoginSso ().redirectToSSO ();
- Click the Submit button to save the System Property.
Step 3: Test the Auto-Redirect
Open a new browser window and enter the ServiceNow instance URL, for example, http://instance.service-now.com.
The user should be automatically redirected to http://instance.service-now.com/login_locate_sso.do.
The user should then be redirected to the correct IDP login page based on their SSO Source field in the User table.
Please mark it helpful if you find it interesting
