Email hyperlinks redirect to Service Portal login

[jarleaase]

In our project we are using Azure AD as our SSO-provider.

What I cant make working is redirecting email hyperlinks to the Service Portal login page in order to do an external login if the user does not have a SSO-session.

I have modified the hyperlinks it self to go to the Service Portal and that part is working.

Also if I have a SSO-session it is working fine. The problem is the redirecting when not already logged in.

I've tried to set all the redirect-properties according to instructions on various sites but can't make it work.

All help is appreciated.

[Matt Saxton - G]

HI Jarle,

I'm a little confused here. You send a user and email with a link. They click the link and you want them NOT to use SSO?

Or are you using external login to determine if they should use SSO? IE you have some-sso/some-not.

-Matt

[jarleaase]

Sorry about the confusing description of my problem.

I do want to use SSO.

When the user don't have a SSO-session and he clicks the hyperlink in the mail, I want the Service Portal login page with the 'Use external login' option to be presented.

Then the user clicks the 'Use external login' link and the user is promted to give his SSO userid.

[robpickering]

Jarle,

This should be a function of your SSO configuration.   Unauthenticated users should always go to a login page.   The problem then, is that once authenticated, you'd like them to be redirected to the page they originally asked for.   This is also part of the SSO configuration, called "RelayState".   You'll need to work with whomever is providing your SSO authentication IdP on how they configure RelayState to make it work properly.

From reading your follow-up it sounds like you want them to be taken specifically to the ServiceNow login page, but that shouldn't be necessary, as SSO will handle the authentication.   That ServiceNow login page is actually tricky to get to, because usually when you enable SSO, it takes over all of the login authentication.   It would seem you're trying to add a manual step (clicking on 'User external login') when that shouldn't be necessary.

-Rob