Enable public access to a specific ServiceNow catalog item by bypassing Single Sign-On (SSO).

bindu214301
Tera Expert

3 weeks ago

Background:
We have a Facilities-related catalog item that needs to be accessible to external or unauthenticated users. Despite attempts to make the item public, users are still redirected to Microsoft login due to enforced SSO.

Objective:
Allow unauthenticated users to access and submit the catalog item without requiring Microsoft account authentication or SSO.

Justification:
This functionality is essential for enabling access to external stakeholders or visitors who do not have corporate credentials but need to interact with the catalog item.

Requested Action:
Please advise on configuration options or enhancements that would allow bypassing SSO for this specific catalog item or suggest alternative approaches to achieve public accessibility.

0 Helpfuls
  • 272 Views
2 REPLIES 2

vignesh parthib
Tera Guru

3 weeks ago

Hi @bindu214301 

 

Please refer below link for accessible to external or unauthenticated users.


https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0681861

https://www.servicenow.com/community/servicenow-ai-platform-forum/how-to-make-catalog-item-public/m-...

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0728420

 

Thanks,
Vignesh
"If this solution resolves your issue, kindly mark it as correct."

0 Helpfuls

ChallaR
Mega Guru

3 weeks ago

Hi @bindu214301 ,

please find the below steps -

1. Bypass SSO for Specific Pages

ServiceNow enforces SSO globally unless explicitly bypassed. To allow public access:

  • Use the login.do or side_door.do URL for local login (if needed for testing).
  • For full public access, configure the catalog item page to not trigger SSO by ensuring it’s listed in the sys_public.list table. [Disable SS...ServiceNow]

 2. Create a Public Service Portal Page

  • Clone the sc_cat_item page and name it something like sc_cat_item_public.
  • Set the page role to public.
  • Clone the SC Catalog Item widget and assign the public role to it.
  • Assign this public page as the homepage for a dedicated portal (e.g., Facilities Portal). [Solved: Se...Community]

 3. Configure the Catalog Item

  • Go to the catalog item record.
  • Under Available For, create a User Criteria record with the public role.

 

  • Ensure the catalog item is assigned to a public category.
  • In the Portal Settings tab, check:
    •  Hide Attachments
    •  Hide “Add to Wish List”
  • Note: Attachments and some client scripts may not work for unauthenticated users due to REST API restrictions. [Solved: Pu...ServiceNow]

 4. Adjust ACLs and Security

  • Ensure the following tables have read/create ACLs that allow access without roles:
    • sc_cat_item
    • sc_req_item
    • sc_task
    • Any custom tables (e.g., u_facilities_request)
  • Avoid using gs.getSession().isLoggedIn() in Business Rules or Client Scripts for public items. [guest User...ServiceNow]

 5. Test in Incognito Mode

  • Use a browser in incognito mode to simulate unauthenticated access.
  • Navigate to the public portal page (e.g., /facilities?id=sc_cat_item_public&sys_id=<item_id>).
  • Confirm that the form loads and submits without redirecting to Microsoft login.

NOTE -------

Common Pitfalls to Avoid

Issue Fix
Redirect to SSOEnsure the page is listed in sys_public.list and not protected by SSO rules.
“You are not authorized” errorCheck ACLs and User Criteria for public role.
Attachments not workingHide attachment section in portal settings.
Variables not loadingEnsure variable permissions allow Create for public users.

 

Thanks,

Rithika.ch

0 Helpfuls