Single Sign On and Deep links

[lw2]

Hi There,

I am sorry if this is a FAQ, but I would really appreciate any help. I have read this article for reference: http://wiki.servicenow.com/index.php?title=External_Authentication_(Single_Sign-On_-_SSO)

My client has implemented SSO by using the Direct Token solution. We have done it through the IIS Server.

The way to access ServiceNow is by clicking on a link on the customers Intranet. the link redirects you to Servicenow and logs the users into their home page.

I have two requirements, i need help with.

1) If the user is not already logged in,, they will be directed to the login page if they press a link with a reference to a record in ServiceNow. they need to be logged in for this to Work. Is there a way to solve this and somehow build the redirect link into the links provided in emails?

2) The customer has a huge intranet, and wants to be able to create Deep links from their intranet to the actual catalog items in ServiceNow. Is there a way to ensure, that the user will be logged in as part of pressing the link?

I would really appreciate any feedback on this matter!

thanks a lot

Lasse Wilén

[lw2]

Hi Again,

Anybody has some valid input or sugegstions to how I can move on with this issue?

Thanks

Lasse

[Jason Stephens]

Try this format for the URL -

https://<base URL>/nav_to.do?uri=<page name>.do

The "nav_to.do?uri=" piece should allow the link to direct to the correct location even after SSO has done its thing.

[garthho · Accepted solution]

Hi Lasse,

Just had this same situation resolved with the help of S-Now Support, Here are the steps that were taken. Hope this helps.

Best Regards.

Navigate to System Definition

Installation Exits

SAML2Logout_update1

initially "Inactive" then set to "Active"

SAML2SingleSignon_update1

initially "Inactive" then set to "Active"

-------------------

Script Includes:

SAML2_update1

initially "Inactive" then set to "Active"

-------------------

SAML Property:   (value)

The Identity Provider URL which will issue the SAML2 security token with user info.

[lw2]

Hi Jason and Howard,

thanks a lot for reaching out to me, and providing usefull answers. this is actually a common ask from our customers, when ADFS or a Standard SAML 2.0 solution is not availble, but your only option is Gistes token ( I believe it is based on SAML 1.1 or something like that)

All the best and once Again thanks a bunch

Lasse Wilén

It Management Consultant - BusinessNow