---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/pt-BR/platform-security

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Create an external identity provider

# Create an external identity provider {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 min. de leitura

After you have configured the multi-provider SSO properties, you can update or create
new SAML 2.0 or digest token identity provider.

## Antes de Iniciar

Role required: sso_config_admin, business_rule_admin, script_include_admin

## Procedimento

1. Navigate to AllMulti-Provider SSOIdentity Providers.
2. To edit an identity provider record, click the record.
   * For digest token configurations, manually update the properties.
   * For SAML2 Update 1 configurations, automatically update the identity provider metadata with the Import Identity Provider Metadata related link or update the properties manually.
   * For OpenID Connect configurations, manually update the properties.
   {#t_CreateUpdateIdentityProvider__choices_b4k_lzd_zq}
3. To create a new identity provider, click New.
   * For digest token configurations: Click Digest SSO and enter the digest properties for multi-provider single sign-on.
   * For SAML2 configurations: Click MultiSSOV2_SAML2_custom and import the identity provider metadata from a URL, as XML, or manually enter the identity provider information.  
   * For OpenID Connect: Click OpenID Connect and enter client ID, client secret, and well known configuration URL.
   {#t_CreateUpdateIdentityProvider__choices_mjz_vzd_zq}
4. To make the IdP the failover IdP that is used when the default IdP is not available, select the Default check box.  
   If you have SAML 2 Update 1 active and you upgrade to the Fuji release, the
   SAML 2 Update 1 IdP is selected as the default failover. No default failover
   IdP is selected for new instances or if you are upgrading from a release on
   which SAML 2 Update 1 is not active.  
   Nota:  
   The metadata import process automatically creates a certificate record for the identity provider. Navigate to the x509 Certificate module to see the certificate.  
   Nota:  
   Certificates for single-sign on should always be in PEM format to work with SAML certificates.
5. If E-Signature is active, configure the Identity Provider form and add the Assertion Consumer URL for eSignature authentication field.  
   In most cases, this URL is: `https://YOURINSTANCE.service-now.com/consumer.do`. However, if you employ a customized method of handling the SAML authentication for E-Signature, you can set up your own consumer URL. If you are only using SAML 2.0 Update 1 and not using Multi-Provider Single Sign-on, configure the assertion consumer URL with [E-signature SAML properties](https://www.servicenow.com/docs/AKX2w303fg3limr550xprA "Configure the following properties for E-Signature with Security Assertion Markup Language (SAML) 2.0 update 1.").