Steps to configure SAML SSO for ServiceNow

About ServiceNow

ServiceNow is a cloud-based collaborative platform that merges the functionalities of a spreadsheet and a database, enabling users to organize and manage various types of data efficiently. It offers a user-friendly interface that allows individuals and teams to create databases without needing extensive technical knowledge.

The following steps will help you enable single sign-on (SSO) for ServiceNow from Identity360.

Prerequisites

1. The MFA and SSO license for Identity360 is required to enable SSO for enterprise applications.
2. Log in to Identity360 as an Admin or Super Admin.
3. Navigate to Applications > Application Integration > Create New Application, and select ServiceNow from the applications displayed.
   Note: You can also find ServiceNow from the search bar located at the top.
4. Under the General Settings tab, enter the Application Name and Description.
5. Under the Choose Capabilities tab, choose SSO and click Continue.
   General Settings of SSO configuration for ServiceNow.
6. Under Integration Settings, navigate to the Single Sign On tab and click Metadata Details. Copy the metadata file to be pasted during the configuration of ServiceNow in Identity360 by clicking Copy from the Metadata field.
   Integration Settings of SSO configuration for ServiceNow.

ServiceNow (service provider) configuration steps

1. Log in to ServiceNow with admin privileges.
2. In the top pane, click All and search for the System Definition section from the search box, and then select Plugins.
   ServiceNow plugins selection.
3. Search for Integration - Multiple Provider Single Sign-On Installer, then Install and activate it.
   ServiceNow Multiple Provider Single Sign-On Installer installation.
   ServiceNow SSO installation review.
4. In the left pane, search for the Multi-Provider SSO section from the search bar, and then select Properties from the Administration section.
   Portal view of ServiceNow.
5. In the Multiple Provider SSO Properties dialog box, perform the following steps:
   • Check Enable multiple provider SSO.
   • Check Enable Auto Importing of users from all identity providers into the user table.
   • Check Enable debug logging for the multiple provider SSO integration.
   • Under The field on the user table that..., enter email.
   • Select Save.
   Customization of properties for ServiceNow SSO.
6. In the top pane, click All, and search for Identity Providers.
   ServiceNow identity providers selection.
7. In the Identity Providers dialog box, select New.
   New addition of an identity provider in ServiceNow.
8. In the What kind of SSO are you trying to create? section, select SAML.
   Creation of SAML SSO in ServiceNow.
9. Under Import Identity Provider Metadata, choose the XML radio button > paste the Metadata that you copied > click Import.
   Import identity provider metadata in ServiceNow.
10. It will read the identity provider metadata information and populate all the field information.
    • For Name, enter a name for your configuration.
    • Confirm that NameID Policy is set to urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress value.
    • Click Update.
    Import identity provider metadata in ServiceNow.
11. Select Advanced. In User Field, enter email.
    Import identity provider metadata in ServiceNow.
12. Select Test Connection at the top-right.
    Import identity provider metadata in ServiceNow.
13. You will be redirected to the Identity360 login page for authentication. Once authentication is completed, close the window and click Activate.

Identity360 (identity provider) configuration steps

1. Switch to Identity360's application configuration page.
2. Enter the Relay State parameter, if necessary.
   Note: Relay State is an optional parameter used with a SAML message to remember where you were or to direct you to a specific page after logging in.
3. Enter the Instance Name of your ServiceNow account.
   Note: You can obtain your ServiceNow Instance Name by logging in to ServiceNow > Manage > Instance > copy the Instance Name.
4. Click Save.
   Integration Settings of SSO configuration for ServiceNow.
5. To learn how to assign users or groups to one or more applications, refer to this page.

Your users will now be able to sign in to ServiceNow through the Identity360 portal.