Can't access WSDL when SSO is configured

Greenster
Giga Contributor

Hi team,

 

I'm using PDI.

When SSO is not configured, I'm able to access the WSDL via - https://dev111222.service-now.com/sys_user.do?WSDL

I'm prompted for credentials and then I can access the WSDL

 

However when enabling SSO, I'm no longer able to access the WSDL url.

 

Is this a known issue?

How can I still use SSO and WSDL? 

 

My SSO config:

Greenster_0-1727763780089.png

After I enable SSO, the credentials are not being accepted.

 

Greenster_1-1727763911603.png

The admin user which I'm using to authenticate, is configured for ACR.

 

Appreciate your input

1 ACCEPTED SOLUTION

AnveshKumar M
Tera Sage
Tera Sage

Hello @Greenster 

 

When you enable SSO, you should configure authentication policy contexts. Please read more about that here https://docs.servicenow.com/bundle/xanadu-platform-security/page/integrate/authentication/concept/au... 

 

And, if you have enabled ACR for your admin account, the role of the account might be limited to recovery such as disabling the SSO etc. when logged in using local credentials.

 

Login to your PDI, and have a seperate account created with all required roles and try using that for authentication. If it still doesn't work even though the account has all required roles, you have to look at the auth context policies.

 

Please mark my answer helpful 👍 and accept as a solution if it helped you.

 

Thanks,
Anvesh

View solution in original post

3 REPLIES 3

Greenster
Giga Contributor

any ideas? 

AnveshKumar M
Tera Sage
Tera Sage

Hello @Greenster 

 

When you enable SSO, you should configure authentication policy contexts. Please read more about that here https://docs.servicenow.com/bundle/xanadu-platform-security/page/integrate/authentication/concept/au... 

 

And, if you have enabled ACR for your admin account, the role of the account might be limited to recovery such as disabling the SSO etc. when logged in using local credentials.

 

Login to your PDI, and have a seperate account created with all required roles and try using that for authentication. If it still doesn't work even though the account has all required roles, you have to look at the auth context policies.

 

Please mark my answer helpful 👍 and accept as a solution if it helped you.

 

Thanks,
Anvesh

Thanks.

I've created a new user with admin role, and after enabling SSO, I'm able to access the WSDL with the new user