---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Multi-Provider single sign-on (SSO)

# Multi-Provider single sign-on (SSO) {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 Minuten Lesedauer

External SSO allows organizations to use several SSO identity providers (IdPs) to manage authentication as well as retain local database (basic) authentication.

Multi-Provider Single sign-on (SSO) is an authentication method that enables users to access multiple applications with one login and one set of credentials.

For using SSO, you must understand the following:

* Service Providers: When users trying to access the ServiceNow instance are redirected to an Identity Providers (IdP) to validate their credentials after successful validation users are allowed to access the instance. Here, ServiceNow acts as a service provider and relies on an Identity Provider (IdP) for handling user authentication and granting access to the instance.
* Identity Providers: IdPs are external systems that validates the users identity and credentials to access a system.

{#c_MultipleProviderSingleSignOn__ul_u3z_l3t_x2c}

To establish an SSO with to access ServiceNow, you must activate Multi-Provider Single sing-on (SSO) you must install the Integration - Multiple Provider Single Sign-On Installer (com.snc.integration.sso.multi.installer)
plugin. For more information, see [Activate Multi-Provider SSO plugin](https://servicenow-prod.fluidtopics.net/9H_wCMlkow71F2OSeaL3KQ "This integration requires the Integration - Multiple Provider Single Sign-On Installer (com.snc.integration.sso.multi.installer) plugin.").

After successful installation of the plugin, you can customize the SSO properties, access tables and scripts that are shipped along with the plugin. For more information, see [Multi-Provider SSO properties, tables, and scripts](https://servicenow-prod.fluidtopics.net/MI2cksGcfac6ZqR5Qk9B_A "The Integration - Multiple Provider Single Sign-On Installer plugin includes the following system properties, tables, and scripts.").  
ServiceNow supports the following SSO methods:

* [OpenID Connect](https://servicenow-prod.fluidtopics.net/LeLluj5MBGJhIyz77uKVTA "OpenID Connect (OIDC) is an identity layer built on top of the OAuth protocol, which provides a modern and intuitive Single Sign-on (SSO) experience to you and your end users.")
* [SAML 2.0](https://servicenow-prod.fluidtopics.net/oU_wK6m08Nu~IartngzdzA "The Security Assertion Markup Language (SAML) is an XML-based standard for exchanging authentication and authorization data between security domains.")
* [Digest Authentication](https://servicenow-prod.fluidtopics.net/UWAsq9OLuU7opWTpAiK6Yg "The digest token authentication passes user credentials and a digest token within an unencrypted HTTP header.") (Token based authentication).
{#c_MultipleProviderSingleSignOn__ul_sqm_bhw_fp}

Choose the SSO method based on your requirement and learn more about how you need to prepare for configuring SSO. You must perform several steps to set up Multi-Provider SSO, including configuring properties, creating identity
providers (IdPs), and configuring users to use SSO. For more information, see [Multi-Provider SSO configurations](https://servicenow-prod.fluidtopics.net/N~HAx2EtGMeIfiS_Vn0xBw "You must perform several steps to set up Multi-Provider SSO, including configuring properties, creating identity providers (IdPs), and configuring users to use SSO.").  
After a successful configuration, the active IdPs in the instance are listed on the ServiceNow. You can list various SAML or OIDC Identity Providers (IdPs).  
Hinweis:  
A maximum of 10 IdPs can be listed on the login page. The IdP options won't be visible if the instance has Domain Support - Domain Extensions Installer (com.glide.domain.msp_extensions.installer) plugin installed and enabled.  
The Zurich release of ServiceNow include the following enhancements on SSO:

* List SAML IdPs on login page: Log in using SAML and OIDC IdPs that are listed on the login experience on both the platform and portal login pages, making it easier for users to select their preferred IdP. Earlier only OIDC IdPs were listed.
* Select group for Auto-Provisioning: Select specific groups during the auto-provisioning configuration for SAML and OIDC, ensuring users are assigned to the correct groups automatically.
* Configure multiple OIDC record using the same well-known URL: Simplify OIDC setup by allowing the creation of OIDC records using the same well-known URL, streamlining the configuration process.
* Enhanced External logout complete page: Display of login failure reason to the user. Provision to log in again to ServiceNow on the external logout complete page in case of successful logout.
* Enhanced error message: Display of generic error message when Single Logout (SLO) is unsuccessful, ensuring consistent and secure communication.
* Notification enhancements for SAML Certificate and Encryption Keystore: Receive timely notifications to the admins for SAML certificate and Encryption Keystore updates expiry, ensuring that your SSO configurations remain secure and up-to-date.
{#c_MultipleProviderSingleSignOn__ul_idf_1lb_y2c}  

## Why organization needs SSO {#c_MultipleProviderSingleSignOn__example_kzm_cvs_x2c}

A globally dispersed corporation might require one SSO provider for their employees, a different one for their vendors, and local database authentication for their administrators. Alternatively, a company might implement SAML
2.0 and a digest token authentication solutions on the same instance.