G'Day fantastic people.
So I have done a few implementations with customers establishing SSO via the customers ADFS and the ServiceNow SAML connection.
And what happens is:
1. If customer is on internal customer network, browsing to instance takes them straight to the instance, because their network email is the same as in SN;
2. If customer is remote (ie Not on network), then they are presented with the ADFS Sign in Page, where they select what they want to connect to, being name of instance, followed by their network credentials. Hit Ok and they are into their instance.
This is all great.
However, this time, no matter what I try, the customer will ALWAYS ends up at the ADFS login page. They can select instance, pop in some credentials (network), and they are in. But for users on the internal network, I want this to bypass the ADFS screen and assuming their emails match, let them in.
I have used the URL that allows me to hard code the service I want to go to, that's fine.... albeit it still asked me to login at the ADFS page even if I'm already logged into the network.
[Here is the URL for reference ... https://samportal.example.com/adfs/ls/idpinitiatedsignon.aspx?logintoRP=https://company.service-n... (of course, with values changed)]
The only thing I can see different is that the customer is using ADFS 3.0, and the others ADFS 2.0.
Any ideas out there? Thanks in advance.
