question SSO Auth Options - Insight Needed in Community Central forum

SSO Auth Options - Insight Needed

Zack Zap — Mon, 21 Apr 2025 01:40:07 GMT

Hello, good day! I'm keen to understand how to configure this kind of set-up as I'm still grasping the concepts of ServiceNow's SSO:

If a user is part of an SSO group,

-allow login with username & password

If not part of group,

-need to login via provider

We found this OOB auth policy context called "SSO - ACR Context" and we thought changing the Policy Condition: "Allow Non Local Login Users" to

would allow this to take effect. Am I missing a config somewhere?

Also checked the documentation for reference but I'm still quite confused:

https://www.servicenow.com/docs/bundle/washingtondc-platform-security/page/integrate/single-sign-on/concept/sso-acct-recovery.html

Your help and insight would be appreciated. Thanks!

Re: SSO Auth Options - Insight Needed

Shree_G — Mon, 21 Apr 2025 05:04:08 GMT

Hello @Zack Zap ,

If SSO is configured successfully, you can set\create the property "glide.sso.acr.enabled" as "false". Then users can login with local login as well. Reference KB:

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0997746

Re: SSO Auth Options - Insight Needed

Zack Zap — Thu, 24 Apr 2025 02:09:40 GMT

Hi @Shree_G ,

Thank you for the reply! I'm not too comfortable deactivating this system property due to the security implications, unfortunately. Also, this may not cover the:
"If a user is part of an SSO group,

-allow login with username & password

If not part of group,

-need to login via provider"
part of the requirement. Thank you nonetheless. 🙂