Configuring Corporate Single Sign On

App Portal / App Broker for ServiceNow 2016

In previous releases, access to the App Portal app store was limited to domain-authenticated users only. Starting with App Portal 2016, you can configure single sign-on authentication for your users using your corporate single sign-on system, enabling them to access the App Portal app store on-the-go from locations outside the corporate network or VPN.

Important • Single sign-on authentication is not supported when using the App Portal mobile interface.

Single sign-on is configured on the Site Management > Settings > Single Sign On view:

Figure 1:  Site Management > Settings > Single Sign-On View

App Portal 2016 provides support for the following single sign-on authentication types:

Supported Single Sign-On Types

Type

Description

SAML 2.0

SAML (Security Assertion Markup Language) 2.0 is an XML-based, open-standard data format for enabling web browser single sign-on.

See Configuring SAML 2.0 Authentication.

OAuth 2.0

OAuth is an open standard for authorization, commonly used as a way for users to log in to third party websites using their Google, Facebook, Microsoft, Twitter, etc. accounts without exposing their password.

See Configuring OAuth 2.0 Authentication.

OpenID Connect

OpenID is an open standard and decentralized authentication protocol which allows users to be authenticated by co-operating sites (known as relying parties) using a third-party service.

See Configuring OpenID Connect Authentication.

Custom

To implement a custom single sign-on authentication type, you would need to write a custom SSL page (.aspx) to redirect to. App Portal is installed with a boilerplate custom SSL page named CustomSignon.aspx, which your services team can customize for your organization.

See Configuring Custom Authentication.

Important • When using single sign-on, App Portal needs to be configured to run with anonymous authentication in IIS. By default, Windows Authentication is selected.

See Also