Windows OS authentication to log in to ServiceNow?

[SandeepKSingh]

I would like to understand whether ServiceNow supports direct authentication via Windows OS (for example, when a user is already logged into their Windows machine). If yes, what configurations or settings are required to enable this functionality?

[Ravi Gaurav · Accepted solution]

Hi @SandeepKSingh 

Below Thread will help you
https://www.servicenow.com/community/itsm-forum/is-it-possible-to-use-windows-os-authentication-to-l...

[Ravi Gaurav · Accepted solution]

Or the Below Article will also Help 

Windows OS authentication” as in “you log into your Windows PC, and then, without further login, you get into ServiceNow” is not something ServiceNow does natively just by enabling a checkbox. But you can achieve that behavior via SSO, using integrations that rely on Windows/AD-based identity providers. Some of the typical methods are:

1. Active Directory + ADFS / Azure AD
   Use Windows Active Directory or Azure AD (or similar) as the identity provider. When configured, users who are already signed into Windows (and in the domain) may get single sign-on into ServiceNow.

2. Kerberos / Integrated Windows Authentication
   In some on-premises setups or where browsers are domain-joined, you can use protocols like Kerberos so that the browser transparently sends credentials from the logged-in Windows session. This works if your network, browser, and identity provider are all configured right.

3. SAML or OAuth flows
   ServiceNow supports SAML, OAuth, etc. If your identity provider supports sign-in based on the Windows credentials (for example, via Azure AD or another IdP integrated with Windows authentication), then ServiceNow can accept that via SSO.

What settings or configurations are typically required

To set this up, you’ll usually need to do the following:

• Set up an identity provider (IdP) like ADFS, Azure AD, or similar which authenticates users based on AD/Windows credentials.

• Enable/configure Single Sign-On in ServiceNow, pointing to the IdP. There’s a documentation page to follow. ServiceNow

• Ensure that users in AD are mapped properly to users in ServiceNow (user provisioning or user data sync)—ServiceNow must recognize the user accounts.

• Configure the DNS, certificates, browser settings, etc., for SSO to work (for instance, if using Kerberos or integrated Windows authentication, browser must allow “Integrated Windows Authentication”, and the user’s device must be domain-joined).

• Test and possibly adjust security settings, redirect URLs, etc., so that authentication flow works smoothly

[Ravi Gaurav · Accepted solution]

Hi @SandeepKSingh 

Below Thread will help you
https://www.servicenow.com/community/itsm-forum/is-it-possible-to-use-windows-os-authentication-to-l...

[Ravi Gaurav · Accepted solution]

Or the Below Article will also Help 

Windows OS authentication” as in “you log into your Windows PC, and then, without further login, you get into ServiceNow” is not something ServiceNow does natively just by enabling a checkbox. But you can achieve that behavior via SSO, using integrations that rely on Windows/AD-based identity providers. Some of the typical methods are:

1. Active Directory + ADFS / Azure AD
   Use Windows Active Directory or Azure AD (or similar) as the identity provider. When configured, users who are already signed into Windows (and in the domain) may get single sign-on into ServiceNow.

2. Kerberos / Integrated Windows Authentication
   In some on-premises setups or where browsers are domain-joined, you can use protocols like Kerberos so that the browser transparently sends credentials from the logged-in Windows session. This works if your network, browser, and identity provider are all configured right.

3. SAML or OAuth flows
   ServiceNow supports SAML, OAuth, etc. If your identity provider supports sign-in based on the Windows credentials (for example, via Azure AD or another IdP integrated with Windows authentication), then ServiceNow can accept that via SSO.

What settings or configurations are typically required

To set this up, you’ll usually need to do the following:

• Set up an identity provider (IdP) like ADFS, Azure AD, or similar which authenticates users based on AD/Windows credentials.

• Enable/configure Single Sign-On in ServiceNow, pointing to the IdP. There’s a documentation page to follow. ServiceNow

• Ensure that users in AD are mapped properly to users in ServiceNow (user provisioning or user data sync)—ServiceNow must recognize the user accounts.

• Configure the DNS, certificates, browser settings, etc., for SSO to work (for instance, if using Kerberos or integrated Windows authentication, browser must allow “Integrated Windows Authentication”, and the user’s device must be domain-joined).

• Test and possibly adjust security settings, redirect URLs, etc., so that authentication flow works smoothly

[Bhuvan · Accepted solution]

@SandeepKSingh 

Yes, it is supported. Refer below Knowledge Article and documentation link for more information

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0823907

https://www.servicenow.com/docs/bundle/zurich-platform-security/page/integrate/single-sign-on/task/t...

If this helped to answer your query, please mark it helpful & accept the solution.

Thanks,

Bhuvan

[SandeepKSingh]

Thanks @Ravi Gaurav and @Bhuvan   for your quick Help