question Re: SSO changing from user id to email address in ITSM forum

SSO changing from user id to email address

Anjaneyulu Muv1 — Mon, 06 Jun 2022 10:28:56 GMT

Hi Guys,

In my organization SSO already configured. Now Users want to change SSO from User ID to email address.

Will you guys please help me how many places required to change configurations.

Thank you.

Re: SSO changing from user id to email address

suvro — Mon, 06 Jun 2022 11:48:41 GMT

There are two places you have make changes

1. SSO properties

2. Identity Provider record

Re: SSO changing from user id to email address

Anjaneyulu Muv1 — Tue, 07 Jun 2022 02:56:25 GMT

Hi Suvro,

Thank you for the reply.

i have updated in both places

in AD side already changed. it is working fine almost all users but for few users it is going to logout page.

one example

when i try to login with 1st user always going to 2nd user and giving logs like below

Username anjaneyulu.m locked: no thrown error

Please help me on this.

Thank you

Re: SSO changing from user id to email address

suvro — Tue, 07 Jun 2022 03:24:40 GMT

Delete the locked out and active false records. Duplicate records cause problems because you do not know which record the system will match first while logging. So deleting the locked out and active false record will help resolving your issue.

Please mark my answer correct and helpful. If it resolved your issue

Re: SSO changing from user id to email address

Anjaneyulu Muv1 — Tue, 07 Jun 2022 03:47:40 GMT

Hi Survo,

Actually these are not duplicate records. we are syncing from 2 AD systems. user id same in 2 ad systems. they want to access 2 system later.

so we modified this SSO from user name to user principle name.

Re: SSO changing from user id to email address

suvro — Tue, 07 Jun 2022 03:57:30 GMT

Hi,

Then use the below doc to make sure users get option to select which SSO to use. This will help

https://docs.servicenow.com/en-US/bundle/sandiego-platform-administration/page/integrate/single-sign-on/task/t_AllowUsersToChooseTheLoginIdP.html

Re: SSO changing from user id to email address

suvro — Tue, 07 Jun 2022 04:01:09 GMT

Also as you have changed the Identity provider record. can you check with Identity Provider's admin whether changes are reflecting at their end as well or not he needs to update from his side as well