Can we use SSO if we already have a LDAP setup?

[souren0071]

Hi all experts,

We are planning to implement Single Sing-on in our service-now instance. We had a LDAP set up from beginning for user authentication and data imports to user table from active directory. We want to use this LDAP set up for data imports and use SSO for user authentication. is this possible? Basically does it have any impact on existing LDAP if we use SSO?

There are multiple SSO techniques available from product document as follows:

• Unencrypted HTTP Header
• Digest Token Authentication
• SAML 1.1 Browser POST Profile
• SAML 2.0 Web Browser SSO Profile
• Stateless Open ID with signature verification
• Multiple Provider Single Sign-On

Which technique is suitible in this case? I'm expecting detailed reply with related links.

Thanks in advance.

Regards,

Souren

[Charlotte Pakes]

Hi Souren,

We recently went live with SSO having had an LDAP set up previously. We have kept the LDAP config as it was as we use this for data imports from AD, and retaining the config for authentication means side_door.do continues to be available as an alternative should we ever have issues with SSO. We may look to disable this at a later date.

We used the Multiple Provider Single Sign-On plugin to setup SSO, and it was very easy. No changes were made to the LDAP config. All the info you need to set it up is on the Docs site - https://docs.servicenow.com/bundle/jakarta-servicenow-platform/page/integrate/single-sign-on/concept...

It's been running fine for about a month now. I hope this provides some reassurance?

Cheers,

Charlotte

[souren0071]

Hi Charlotte,

Thank you so much for your quick response. That's really a great assurance. I'm looking into the docs and try to set up in my personal instance. Will get back to you for any confusion.

Thanks a lot.

Regards,

Souren

[Charlotte Pakes]

No problem. Having seen Graeme's question below, for reference our integration is with ADFS.

[G_Ede]

What SSO service are you planning to use?