Hi,
As a system admin, is there a way I can set up monitoring of local/side door log ins?
As an organisation, we want users to sign into the ServiceNow platform with SSO, with local sign ins, where the user manually enters a username and password, only being used if SSO is unavailable.
I'd like to either set up an alert for when any user signs in locally (without SSO) or alternatively a report that could be scheduled to run, say, weekly, listing any local sign ins that have taken place.
I've not been able to locate any guidance as to whether this is possible. Looking at the events log, as per How to diffrentiate between side_door.do, login.do & Single Sign-On logins - Support and Troubleshoo..., I can see that Name = "external.authentication.succeeded" appears as a log entry when SSO is used, alongside "login" and "session.establised", and when SSO is not used, and doesn't appear when a user signs in locally. This differentiates SSO from local/side door sign in, but this doesn't help in terms of notifying/reporting when side door is used.
Any advice would be welcome.
