Identity Providers issue !!

[SandeepKSingh]

What happens if one of the Identity Providers (e.g., Azure AD) becomes unavailable? How does ServiceNow handle this?
I asked this questions because I am facing the issue as my client Azure AD is unavailable and all CI need to be discovered .. How to proceed.. as we have SCCM source also and even various discovery sources which are connected via AZURE

[Ravi Gaurav · Accepted solution]

Hi @SandeepKSingh 

ServiceNow supports a fallback mechanism for multiple IdPs. If the primary IdP (e.g., Azure AD) fails, ServiceNow can be configured to automatically attempt to authenticate using a secondary IdP (e.g., Okta). To set this up:

Step 1: In the Multi-Provider SSO configuration, you can set the Order of IdPs. The system will attempt to use the first IdP in the order. Step 2: If the first IdP is unavailable, ServiceNow will move to the next IdP in the list. Step 3: Ensure that each IdP is set up correctly to handle different user groups so that the fallback works smoothly.

It’s also recommended to have monitoring in place for IdP availability to ensure service continuity.