issue with SSO user on ServiceNow

[Snehal13]

I have set up an Azure AD integration with ServiceNow. So one AD acount and under that AD account, created a group and created a test user. main AD account and Test user under the group have different IDs, email.

Through user provisioning, I am able to get both users into ServiceNow from Azure AD.

When I try to login through SSO with main AD account, it works

When I try to login through SSO with test account created under the group of main account, it fails and logout immediately landing on logout page.

User profiles in ServiceNow are active, each user record in ServiceNow is different based on email id and UserID, SSO profile have defined username field which is rightly mapped to user record being used.

What is going wrong here ?

[Dr Atul G- LNG]

Hi @Snehal13 

https://www.servicenow.com/community/developer-articles/servicenow-sso-logout-error-redirects-to-log...

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0727658

[Service_RNow]

Hi @Snehal13 

Plz check this solution this Article with step by step.

How to: Implement Azure AD SSO with ServiceNow 

Please mark reply as Helpful/Correct, if applicable. Thanks!

[Pavel _ulek]

I know where is the problem , 

user_name mismatches on Azure vs ServiceNow , 

thats why email is better solution 🙂 ,

1) in IDP in advanced tab , user_field = email - save
2) Multi-provider SSO -> Administration -> properties - in that last line should be email as well - save
3) Ensure you have users in ServiceNow with exatct same email which is in Azure (User principal name) in main tab of some user - thats the email which needs to be assigned to user's email in SN

then logout successful page shout be out and you should be in with both accounts - if emails are correct 😉 
no SSO source needed, no roles, nothing...