SAML SSO with a Custom URL

[cphanson]

We have a custom URL for our ServiceNow instance, and I would like to have SSO logins work.  SSO is already working on our regular / base ServiceNow URL.  Please see the scenario I'm facing below. Please note: I'm not using our real URLs below, but I'll use examples that are basically the same as our environment.

A URL like this: https://service.myfakecompany.com (this isn't a real URL)
Serves up our instance to users: https://ourinstance.service-now.com (also not real)
End users never know the ServiceNow URL - the browser always shows the first URL (our custom URL). Of course you can use either URL, but we want all of our users to use the custom URL.

I didn't set up the custom URL - that was done years ago. I assume we're using this method, but I'm not positive
https://community.servicenow.com/community?id=community_blog&sys_id=033e22addbd0dbc01dcaf3231f9619d9

We have an A record in our company's DNS that points to an IP address. I believe this server is rewriting the URL to our ServiceNow instance URL.  I'm trying to track down whoever manages this server so I can confirm exactly how its configured and be able to make updates to it if necessary.

We are now implementing SSO using the Multiple Provider SSO plugin. (This Microsoft link describes the method we're using)
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-servicenow-tutorial#configure-azure-ad-single-sign-on-for-servicenow

With the above method, SSO works perfectly with https://ourinstance.service-now.com.

However, when I try from https://service.myfakecompany.com, it does not work. When I attempt an SSO login, this is what happens:
1) Browser briefly flashes error message: Could not validate SAML Response
2) Browser reloads with this text
Logout succeeded
Logout successful
You have successfully logged out.

I need to know how to modify my configuration in ServiceNow or Azure (or both) to make this work from our custom URL. I may also need to modify whatever is happening on the server handling the re-writes, mentioned above. I accept the possibility that this may not work on both URLs… I'm happy if it just works from our custom URL and not the ServiceNow URL.

This is not a technical area that I know much about.  I'm aware there are tools like Fiddler that can help me diagnose what is going on, but I don't know how to use them.  I'm out of my depth!  Thanks in advance for any help.

[Hussain Kachwal]

Hello,

This is very generic related to certificate thing. Could you please follow the below link & check if they are helpful for your scenario:

https://community.servicenow.com/community?id=community_question&sys_id=a4e7472ddb1cdbc01dcaf3231f9619aa

Kindly mark as Answered or Helpful, if applicable.

-Hussain K

[cphanson]

No... not really related to my issue.

[Hussain Kachwal]

This should also help you:

https://community.servicenow.com/community?id=community_question&sys_id=fd0fb629db58dbc01dcaf3231f961912

-Hussain K

[cphanson]

No... in fact I posted in this thread last year!  Not related to the issue i'm having.