Removing Local Login - SSO Only

[Community Alums]

Good Morning,

Due to now having multiple IDPs available for sign in, we need to remove our auto redirect IDP.

We had gone to auto redirect due to people getting confused about local/external login.

I found documentation on disabling the local login for login.do which forces people to the login_locate_sso.do, but before testing implementation I wanted to see if anyone was able to verify that this did not also affect side_door.do

Thank you

[Jaspal Singh · Accepted solution]

Hi Simon,

Not completely sure but we had disabled login.do for some business demands but still side_door.do was accessible. Similar should be the case for you as well.

I don't have any documentation for above for a reference or check but is actual tested behavior.

[Community Alums]

So I found a way around this, as even working with SN we couldn't disable local logon...

I made a new portal called logon, then followed this HI portal KB:

https://hi.service-now.com/kb_view.do?sysparm_article=KB0758382

but modified it to point at the logon portal, that has just a logon page with a modified login widget to only show the external SSO option.

so now when you hit the instance URL it loads that portal, you input your user ID and it redirects you to the correct sso.

[Matthew G]

Setting property `glide.authentication.external.disable_local_login` to `true` will disable local login. Consider also modification of your installation exit if you want to do, say, a white-list approach for local login.

[pbusch]

Thank you for this helpful tip. Is it understood that with this sys_prop set to TRUE that any and all attempts to authenticate with a single-auth//local-login portal will always be forced through the SSO flow?

Thanks!