ServiceNow Login - Dynamic Email login

Rairai31
Giga Guru

Hi All,

I have this requirement to modify the login of SN. Basically, the typical login screen with username and password will be replaced by email. Then once a user enters their email address, if their account is connected to an SSO it redirects them to that the IDP/SSO login page, otherwise it shows the login form (username and password). Could any one suggest me the ways to get it done? Thank you very much. 

5 REPLIES 5

AnveshKumar M
Tera Sage
Tera Sage

Hi @Rairai31 

If you are using Multi-Provider SSO Plugin you can try the following configuration.

 

1. Every user record should have sso_source field populated with corresponding Identity Provider record sys id prefixed with "sso:". For example sso:dfg123ada0ert1345678hh23456hsds312

 

2. In Multiple Provider SSO Properties page configure The field on the user table that identifies a user accessing the "User identification" login page. By default, it uses the 'user_name' field. value to email.

 

AnveshKumarM_0-1697789997913.png

 

3. You should not enable auto redirect IDP for any identity provider record (Auto redirect idP should be false for all Identity providers).

 

After this configuration the login flow should be,

  1. Click the Use external login link on the default login page. The external login page appears, with email field. Users can click Use local login to return to the standard login page.
  2. User enters his email and clicks Submit button. If the user have SSO source field configured, the user will be taken to respective SSO Login page, Otherwise the user will be taken to the default SSO.

This is the most possible solution, I have researched for an alternative almost for 2 months but I ended up with this.

 

Please mark my answer helpful and accept as solution if it helped you t👍✔️

Thanks,
Anvesh

Thank you very much @AnveshKumar M for this. This is very informative! I'll look into this. Thank you.

@AnveshKumar M - is it possible that for example, using the external login page. If the user types in a email with a local login (no SSO source) they will be asked for their password or show the typical login page (username and password) to login and if the user has an SSO source it will direct them to SSO login page? Can this be achievable? Thank you.

Hello @Rairai31 

At the moment it is not possible without SSO source field.

 

I implemented a different solution to overcome this. That is, we have designed a Portal Page which displays 3 buttons (we had 2 SSOs), two buttons for SSO A & SSO B and another one for local login. When the user clicks on a button it will take the user to respective SSO login page or the local login page.

 

Please mark my answer helpful and accept as solution if it helped you 👍✔️

Thanks,
Anvesh