How to Authenticate another user (not who is signed in) on the fly using Okta or AD

[Mark Endsley]

Hi Everyone,

I have a requirement to allow a user to enter their Active Directory username and password into a text box in ServiceNow, and have some external system return whether or not those credentials are valid.

The two ways I can think to do this are.

Okta

Active Directory itself

Unfortunately what I'm finding is that the Mid-Server doesn't do Active Directory Authentication. I am exploring using the Okta Sign-In Widget on the record producer in order to accomplish this but so far we have not had success.

I've also noticed an Okta Spoke in Flow Designer, but like the AD spoke it seems to have everything except for User Authentication.

Does anyone have any ideas that could help us meet this requirement?

[Travis Rogers]

Could you have a “witness user” reference variable that routes an approval to the witness after record submission to confirm they witnessed the submission? Then the flow continues on.. this solves the need of validating the witness prior to the request fulfillment, without the complexity of them logging in on someone else’s computer 

[Mark Endsley]

Thanks Travis,
This is on the table, but we have very big concerns about these users being able to respond via email. These particular users are not well set up to do that.