SSO for only some users
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-06-2015 08:30 PM
Is it possible to make SSO available only for some users and not for all user?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-06-2015 08:40 PM
Upasana,
You'll need a directly LDAP integration (or store passwords in servicenow) I believe this will help you for the Multi Logins.
Section 3.2
Multiple Provider Single Sign-On - ServiceNow Wiki
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-06-2015 09:15 PM
Hi Upasana,
As has already been mentioned deploying multiple provider single sign-on, available since Eureka will allow local authentication.
Multiple Provider Single Sign-On - ServiceNow Wiki
1 Overview
The multiple provider single sign-on feature allows organizations to use several SSO identity providers (IdPs) to manage authentication as well as retain local database (basic) authentication. The integration supports any combination of local and external authentication methods on a single instance:
- SAML 2.0
- Digest Authentication
- LDAP
- Local database authentication
For example, a globally dispersed corporation might require one SSO provider for their employees, a different one for their vendors, and local database authentication for their administrators. Alternatively, a company might implement SAML 2.0 and a digest token authentication solutions on the same instance.
This feature is available starting with the Eureka release.
However using side_door.do will also allow access to the instance without using SSO
External Authentication (Single Sign-On - SSO) - ServiceNow Wiki
..
3.1 Bypassing External Authentication
Administrators may need to bypass external authentication when testing an SSO integration. Administrators can use the following URL to bypass external authentication and log in with a local ServiceNow user. Note that a logged-in user cannot access this page. Attempting to access this page while logged in produces a page not found error.
http://<your-instance>.service-now.com/side_door.do
Note: You can still log in as an inactive user if the user is not locked out. See Making a User Inactive for more information. |
..
Best Regards
Tony
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-02-2016 02:42 PM
Hi Tony,
Do you happen to know if there is a way to get deep links working correctly with MultiSSO Digest Token authentication? In MultiSSO SAML script include, there is a request parameter RelayState that contains the address of the actual page the user was heading for. I wonder how the same information can be retrieved in case of Digest Token. Do you have any idea?
Thanks and regards,
Slava
Blog: https://sys.properties | Telegram: https://t.me/sys_properties | LinkedIn: https://www.linkedin.com/in/slava-savitsky/
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-12-2015 05:54 AM
I want to make SSO enable only to few users. And for other users, they will be redirected to the local page of the instance. How is that possible?