I'm new to CSM but from what I understand, it is common not to run SSO on the portal and use the local ServiceNow authentication for customers in this manner. You can also add an additional SSO source if they are primarily from the same organisation(s) and there is also OIDC which I believe allows your customers to use google and facebook to authenticate.