Browsing ยป Blog

ServiceNow SAML 2.0 – Additional Configurations Update Set

ServiceNow SAML 2.0 – Additional Configurations Update Set

Over the past few months I have had a number of clients contact me with issues regarding SAML 2.0. Due to the complexity of SAML 2.0, and the plethora of options associated with the specification, there are obviously many differences between IdP’s. What works for one, doesn’t always work for another. I have taken the [...]

Supporting Kerberos Authentication with ADFS in ServiceNow

Supporting Kerberos Authentication with ADFS in ServiceNow

If 2011 was the year of ADFS SAML 2.0 implementations in ServiceNow, then 2012 looks like it will be the year of Kerberos Authentication with ADFS and ServiceNow. Over the past few weeks I have had a number of customers contact me regarding better support of their Kerberos authentication when they are using ADFS and [...]

Null Prefix with ServiceNow SAML and Siteminder

Null Prefix with ServiceNow SAML and Siteminder

Over the past few months I have had a few ServiceNow customers contact me with errors that they were seeing when using SiteMinder as their SAML federation service. THE ISSUE When their users would perform an Identity Provider (IdP) initiated login, their ServiceNow instance would throw the following error in the system log: java.lang.IllegalArgumentException: prefix [...]

Possible Fix for ADFS 2.0 SingleLogout with ServiceNow

Possible Fix for ADFS 2.0 SingleLogout with ServiceNow

Many ServiceNow/ADFS clients have been having issues with their SAML SingleLogout from their ServiceNow instance to their ADFS Identity Provider (IdP). I recently worked with a talented systems engineer, J Stephen Kowski, who was able to get SingleLogout to work for his company. Here is a quick summary of what changes he did to get [...]

Fixing SP Initiated Login with ADFS 2.0 and ServiceNow SAML

Fixing SP Initiated Login with ADFS 2.0 and ServiceNow SAML

A few months ago I worked with a client to get AD FS 2.0 working with SAML 2.0 in a situation where ServiceNow is the Service Provider. However, at the time, we were unable to get an SP-initiated authentication scenario to work between SeviceNow and AD FS. I recently came across some articles which keyed [...]

Logout or Cancel Errors with ServiceNow SAML

Logout or Cancel Errors with ServiceNow SAML

Some of my clients have come across an issue with ServiceNow and SAML 2.0. If they perform a successful SingleLogout in SAML, or they cancel out of their SAML login process, they are often returned to the main ServiceNow local login page with an error displayed in red at the top of the page saying: [...]

Bust out of those Frames

Bust out of those Frames

Because ServiceNow is a framed application, I often get asked by customers how to deal with any potential nested frame issues. There are many ways to handle this, but often times it boils down to just inserting frame-busting javascript code in the right place. An HTML document with the following javascript code snippet will detect [...]

Success to Entitlement to Protests to Insanity

Success to Entitlement to Protests to Insanity

I recently watched a terrific commentary by Bill Whittle. I think he hits the nail square on the head with his assessment of the current state of affairs with recent “Occupy Wallstreet” and “Student Loan Crisis” events.

Tutorial: SOAP into ServiceNow via x509 WS-Security

Tutorial: SOAP into ServiceNow via x509 WS-Security

Recently, ServiceNow added inbound WS-Security profiles as a SOAP interface option into the system. I have had several customers ask how this works, so I have created the following tutorial. This article will demonstrate how to set up a self-signed certificate, generate a SOAP client that utilizes the certificate, and configure a ServiceNow instance to [...]

Correcting Misguided SOAP Endpoints in ServiceNow

Correcting Misguided SOAP Endpoints in ServiceNow

I recently worked with a colleague on an issue that he was seeing when trying to connect into a ServiceNow instance via SOAP. He would import the WSDL file into SOAP-UI or any other SOAP client using a WSDL URL similar to: https://myinstance.service-now.com/mytable.do?WSDL The WSDL would import properly and load up all of the available [...]

« Previous Entries