Over the past few months I have had a number of clients contact me with issues regarding SAML 2.0. Due to the complexity of SAML 2.0, and the plethora of options associated with the specification, there are obviously many differences between IdP’s. What works for one, doesn’t always work for another. I have taken the [...]
If 2011 was the year of ADFS SAML 2.0 implementations in ServiceNow, then 2012 looks like it will be the year of Kerberos Authentication with ADFS and ServiceNow. Over the past few weeks I have had a number of customers contact me regarding better support of their Kerberos authentication when they are using ADFS and [...]
Over the past few months I have had a few ServiceNow customers contact me with errors that they were seeing when using SiteMinder as their SAML federation service. THE ISSUE When their users would perform an Identity Provider (IdP) initiated login, their ServiceNow instance would throw the following error in the system log: java.lang.IllegalArgumentException: prefix [...]
Many ServiceNow/ADFS clients have been having issues with their SAML SingleLogout from their ServiceNow instance to their ADFS Identity Provider (IdP). I recently worked with a talented systems engineer, J Stephen Kowski, who was able to get SingleLogout to work for his company. Here is a quick summary of what changes he did to get [...]
A few months ago I worked with a client to get AD FS 2.0 working with SAML 2.0 in a situation where ServiceNow is the Service Provider. However, at the time, we were unable to get an SP-initiated authentication scenario to work between SeviceNow and AD FS. I recently came across some articles which keyed [...]
Some of my clients have come across an issue with ServiceNow and SAML 2.0. If they perform a successful SingleLogout in SAML, or they cancel out of their SAML login process, they are often returned to the main ServiceNow local login page with an error displayed in red at the top of the page saying: [...]
Because ServiceNow is a framed application, I often get asked by customers how to deal with any potential nested frame issues. There are many ways to handle this, but often times it boils down to just inserting frame-busting javascript code in the right place. An HTML document with the following javascript code snippet will detect [...]
I recently watched a terrific commentary by Bill Whittle. I think he hits the nail square on the head with his assessment of the current state of affairs with recent “Occupy Wallstreet” and “Student Loan Crisis” events.
Recently, ServiceNow added inbound WS-Security profiles as a SOAP interface option into the system. I have had several customers ask how this works, so I have created the following tutorial. This article will demonstrate how to set up a self-signed certificate, generate a SOAP client that utilizes the certificate, and configure a ServiceNow instance to [...]
I recently worked with a colleague on an issue that he was seeing when trying to connect into a ServiceNow instance via SOAP. He would import the WSDL file into SOAP-UI or any other SOAP client using a WSDL URL similar to: https://myinstance.service-now.com/mytable.do?WSDL The WSDL would import properly and load up all of the available [...]