ServiceNow Login page for the first time after enabling SSO

[Biswajyoti Dutt]

Hello everyone,

I have created the configurations needed to integrate with ADFS for SSO. This is working fine, as people can authenticate themselves via SSO. However, I am stuck with a problem that, when the user tries to open the ServiceNow instance URL (for the first time), the ServiceNow login page is shown where the user can choose to use external login and enter their user id and then they are redirected to the ADFS URL.

Is there a way to direct the user directly to ADFS URL (without even showing the ServiceNow login screen)?

I have already set the disable_local_login property to true, but it did not solve the problem.

Please help me solve this problem.

With regards,

Biswajyoti

[karstenvan · Accepted solution]

Hi...

You either need to...

1. configure each user and/or company at the SysID of the IDP you have configured for SSO

(see section 3.3 of this link...)

Multiple Provider Single Sign-On - ServiceNow Wiki

... or 2.

You can set the SSO IDP globally by adding the sysID of your preferred IDP record to the following system property:

glide.authenticate.sso.redirect.idp.   This will force all the users to use this IDP regardless of previous SSO settings.

If you don't use option 2, then once the user first logs on, their IDP preference will be stored in their logon cookie.   This can be really confusing if you ever change your IDP record or add anther one.   This totally confused us when we were initially setting this up and trying to debug a variety of IDP configuration options.   See section 4.1 of the document above for more details on that.

[Biswajyoti Dutt]

Thanks Karsten,

I could get this to work with solution 2.