How to enable/disable SSO for selected users

[Nisha30]

Hello Community,

How can we Disable SSO or I mean Enable SSO only for few users.

We have Multi SSO enabled in our system and it is working fine.

But some of the users (stakeholders etc,) we need to use them bypass it . I know login.do/ sidedoor.do but it is not always possible to educate the business users in every moment.

If we disable the property the SSO switches off for everyone.

Any way to do for selected users how can we do it. Please help.

Thanks

[Nisha30]

Hi Sohail,

I tried empty the property that leads to local login page -okay

Gave few user specific SSO I'd in User profile and tried using the link Login Via Sso-allows me to put my SSO credentials

It shows Logout successful each time -ISSUE 

This does not happen when I reverse what I did and users can login via SSO.

Can you help what could cause to show each time Logout successful.  Email and user id for user is matching.

Thanks

[Nisha30]

Hi Sohail,

So if we do not do any SSO source we are redirected to SSO logon so how it will prevent those users (who have SSO Source= empty) since they are empty for all now. Sorry not understanding might be missing something.

Thanks

[Sohail Khilji]

You can try the following:

NOTE: Empty the value of glide.authenticate.sso.redirect.idp sys_property, if already exist. (DO NOT DELETE THE PROPERTY)

> This will help the All the Users (Wheather SSO on non-SSO) to land on the ServiceNow local login page and not automatically get redirected to the IDP login page.

 > SSO users will need to click "Use external login" for to land on IDP login page and do SSO authentication, this will save the sys_id of the identity provider record in a cookie (glide_sso_id cookie) in their browser. Once they have successfully logged in for the FIRST time and from then on if the SSO users try to access the instance URL they will automatically start getting redirected to the IDP login page without clicking "Use External Login".

I hope you understand on how to split sso users and non sso users...

[Nisha30]

Thanks Let me configure and let you know if that works

[Nisha30]

Hi Sohail,

I tried empty the property that leads to local login page -okay

Gave few user specific SSO I'd in User profile and tried using the link Login Via Sso-allows me to put my SSO credentials

It shows Logout successful each time -ISSUE 

This does not happen when I reverse what I did and users can login via SSO.

Can you help what could cause to show each time Logout successful.  Email and user id for user is matching.

Thanks