- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-16-2023 03:00 PM
We are reviewing requirements for a custom app that would have both internal corporate users and external users that are not affiliated with our company. Corporate users would authenticate via SSO from azure AD. We would like to allow external users to authenticate with simple username/password so some of the users are not sophisticated, so requiring MFA or other more secure options may not be on the table.
Is it possible to setup multiple authentication methods in a single SN instance? What are the authentication options for external users.
Thanks.
Solved! Go to Solution.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-16-2023 06:27 PM
Hi,
Yes, you can setup multiple authentication methods, but those external users would have access to your instance as well...so they get more than just the custom app. I'd recommend you speak to your ServiceNow account rep as far as any licensing concerns with the custom app and then the concept of "external" users accessing your instance. You may also need to look into the "Explicit Roles" plugin, which incorporates the internal/external user concept as well.
Please consider marking my reply as Helpful and/or Accept Solution, if applicable. Thanks!

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-16-2023 06:27 PM
Hi,
Yes, you can setup multiple authentication methods, but those external users would have access to your instance as well...so they get more than just the custom app. I'd recommend you speak to your ServiceNow account rep as far as any licensing concerns with the custom app and then the concept of "external" users accessing your instance. You may also need to look into the "Explicit Roles" plugin, which incorporates the internal/external user concept as well.
Please consider marking my reply as Helpful and/or Accept Solution, if applicable. Thanks!

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-17-2023 08:39 AM
You can also setup a platform level identity (SSO) and a separate identity for a Service Portal if you might be exposing the application via a portal. For example, we use Azure for the platform identity and then expose the CSM portal to customers via a custom URL and a separate identity (our customer facing home grown).