Wondering why ?

ServiceNow redirects to logout page, ServiceNow logout successful ?

ServiceNow SSO logout error - OKTA - AZURE - ADFS - SSO Circle ?

When integrating any SSO with ServiceNow, its very common that the first test of the integration always redirects to logout successful page, I myself have implemented different SSO's more than 10+times. Every time I do, I always expect this error. So lets figure out What are the common reason that causes ServiceNow redirects to logout successful page.

Kindly request to Bookmark this article as it might help you every time you implement SSO with ServiceNow and get ServiceNow logout error. Also, if you find any fixes apart from the below mentioned points it would be great to put them in the comments so that the community can find it very helpful.

This issue can be focused on 2 aspects:

• 1. All the users facing the same issue.
• 2. Only specific users are facing.

> Based on the aspect you can perform the below check.

Pre-Checks:

Check 1 : Before you begin ( Clear Cache your browser and restart your browser and login again ) or Try a different Brower.

Check 2 : Navigate to the below URL and check if the issue still persist.

https://YOURINSTANCENAME.service-now.com/login.do

Check 3 :

In your User account -- make sure you have same data in your UserID and Email Fields.

Check 4 :

When trying to log with a user check if the user field(commonly user_name or email id) is not empty in his profile (check the field on user form based on the SSO properties configured for login )

Check 5 :

In SAML response ServiceNow would be receiving Audience URI as: https://*********prod.service-now.com however the expected Audience URI is: https://*********prod.service-now.com/ (wondering what's the difference?) its the slash (/).

Check 6 :

One main reason will be user's account "locked out" field is updated to True. (set it to false)

Check 7 :

If users unable to login via Single Sign-on on a domain separated instance and are redirected to "Logout Successful" page: Then...

Refer : https://support.servicenow.com/kb?id=kb%5Farticle%5Fview&sysparm%5Farticle=KB0724410

Check 8 :

In the user table check the SSO Source sys id is matching with the identity provider sys id or not

Check 9 :

In the User account -- make sure you have the same data in your UserId and Email Fields. make sure the email you have in ServiceNow matches up with the email in your source.

Check 10 :

If there are 2 users in ServiceNow with the same email address and SSO users email and not user id (samAccountName) then you will get logout page

Check 11 :

https://support.servicenow.com/kb?id=kb%5Farticle%5Fview&sysparm%5Farticle=KB0787186

Check 12 :

Fields to check on:

NameID Policy: Check the suffix if its emailAddress or its user_name

External Logout Redirect: check if it is as per below screenshot.

In the Advance Section > field: Single sing on script > change it to Custom string and try.

You can consider giving me more point if found any, which I can consider updating the blog with more checks...

Kindly Consider Marking Helpful or Bookmark for Future Reference.