SAML Setup in ServiceNow - Multi-Provider SSO vs. SAML 2 Single Sign-on

AdamSaniS
Tera Contributor

Dear ServiceNow community,

 

I am currently new in ServiceNow. Would like to know the difference between these two methods of starting SAML Setup in ServiceNow.

 

1. Multi-Provider SSO

2. SAML 2 Single Sign-on

 

Using Method 1, I only require XML file or IdP URL, yes? And the system will auto-populate the fields?

 

Thanks,

Adam

1 ACCEPTED SOLUTION

maheshkhatal
Mega Sage

Hello @AdamSaniS ,

The two methods you mentioned serve different purposes:

  1. Multi-Provider SSO:

    • This is used when you have multiple Identity Providers (IdPs) for different user groups.

    • You only need the IdP metadata (XML file or URL), and ServiceNow will auto-populate most fields.

    • It’s ideal for scenarios where users from different organizations or domains need to authenticate via their respective IdPs.

  2. SAML 2 Single Sign-On:

    • This is used for a single Identity Provider setup.

    • You’ll need to manually configure the IdP and ServiceNow SP details.

    • It’s suitable for organizations with a single IdP for all users.

For Multi-Provider SSO, yes, providing the IdP metadata (XML or URL) will auto-populate most fields, simplifying the setup.

If my response helped you please mark this as helpful

Thank you,

Mahesh.

View solution in original post

5 REPLIES 5

Swapna Abburi
Mega Sage
Mega Sage

Hi @AdamSaniS 

SAML SSO configuration is legacy and ServiceNow recommends to use Multi SSO V2. yes, you need IdP URL or XML metadata. After you copy the XML to ServiceNow, all required fields of the identity provider will be updated. You need to test and activate the IdP record.

Also, after IdP is created, you can generate metadata and share with IdP administrator.

 

Does it mean after IdP setup in ServiceNow, we have extra step to generate metadata. Is that correct? Kindly need your advice, appreciate it.

 

Thanks,

Adam 🙂

@AdamSaniS 

yes, after IdP is created, you will see a UI action "generate metadata", you need to give this file to IdP provider. Its not a mandatory step but if your IdP admin requires, you can share.

Thank you so much for your kind response! 😁