---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Configure a Facebook-based SSO

# Configure a Facebook-based Single Sign-On (SSO) {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Configure a Facebook-based SSO to your ServiceNow instance.

## Before you begin

Have a valid Client ID that is configured as an IdP from Facebook.  
Enable the following properties:

* Enable multiple provider SSO.
* Enable debug logging for the multiple provider SSO integrations.
{#configure-facebook-based-sso__ul_sf3_v5g_nrb}

Role required: sso_config_admin, business_rule_admin, script_include_admin

## Procedure

1. Navigate to AllMulti-Provider SSOIdentity Providers.
2. To create a new Facebook identity provider, select New.
3. Select OpenID Connect.
4. On the form, fill in the fields.  
   {#configure-facebook-based-sso__table_ihs_5ym_bmb__entry__2}

   | Fields | Description |
   |-|-|
   | Name | Unique name for the OIDC identity provider configuration. |
   | Client ID | The client ID of the application registered in the third-party OIDC identity provider. |
   | Client Secret | The client secret of the application registered in the third-party OIDC identity provider. |
   | Well known Configuration URL | The URL that contains metadata about the third-party OIDC identity provider. |
   [Table 1. Import OpenID Connect Well Known Configuration form]

   {#configure-facebook-based-sso__table_ihs_5ym_bmb}
5. Select Import.  
   The Facebook-based IdP is created.
6. Select the Facebook IdP.
7. In the Facebook IdP, do the following:
   1. Validate all the fields such as Name, OIDC Entity Profile, External logout redirect, and ServiceNow Homepage.
   2. Provide your SSO label.
8. In the User Provisioning tab, specify the fields that you need to configure users to specific user provisioning and roles.  
   Only the mandatory fields are required. You can specify the remaining fields depending on what you need.
9. In the OIDC Entity tab, do the following:
   1. Select the entity.
   2. Set the Redirect URL field to your Facebook redirect URL.
10. In the OAuth Entity Profiles tab, do the following:
    1. In the profile details, select a profile.
    2. Select a scope and verify the details.  
       For example, select scope-1
11. In the OAuth Entity Scopes tab, select the scope-1 link and add the scope as <kbd class="ph userinput">email</kbd>.
12. To save the configuration, select and hold (or right-click) the header and select Save.
13. To set the configuration as active, select Active.
{#configure-facebook-based-sso__steps_znd_43g_nrb}

## Result

Users are displayed with the Facebook SSO option on the login form.

*[\>]: and then