How to Bypass SSO for Specific Local Accounts in ServiceNow?

[Shubham Bongulw]

Hi Community,

I have a ServiceNow instance configured with SSO (SAML/SSO login enabled). However, I have also created a few local user accounts manually in the platform, and I want to ensure these accounts can still log in using the standard login page, bypassing the SSO flow.

Is there a recommended way to allow only specific local accounts (e.g. admins or break-glass accounts) to bypass SSO, while all other users continue to be redirected through SSO?

Any best practices or configuration steps to achieve this would be much appreciated.

Thanks in advance

[Ankur Bawiskar]

@Shubham Bongulw 

what error they get?

It should be allowed using either of those URLs unless some custom logic is built to restrict it

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Dr Atul G- LNG]

Hi @Shubham Bongulw 

But why does a local user need to go through SSO? That is not purpose of having local user.

[Mvakazi]

Hi @Shubham Bongulw 

Did you get a resolution on this? I have a similar issue

[Ambuj Tripathi]

Hi @Shubham Bongulw 

Have you enabled Account Recovery (ACR) feature in your instance?
Or have you enabled any other post authentication policy using Adaptive Auth framework in your instance?

If any of these two are enabled, probably that's the reason why its not allowing you to do the local login using additional local user accounts.

You may also want to explore this article which I have added specifically for this use case - 
https://www.servicenow.com/community/platform-privacy-security/how-to-block-local-logins-and-allow-o...

LMK further if these helped resolve your issue.

Cheers!