Skip to page contentSkip to chat
ServiceNow support
    • Community
      Ask questions, give advice, and connect with fellow ServiceNow professionals.
      Developer
      Build, test, and deploy applications
      Documentation
      Find detailed information about ServiceNow products, apps, features, and releases.
      Impact
      Accelerate ROI and amplify your expertise.
      Learning
      Build skills with instructor-led and online training.
      Partner
      Grow your business with promotions, news, and marketing tools
      ServiceNow
      Learn about ServiceNow products & solutions.
      Store
      Download certified apps and integrations that complement ServiceNow.
      Support
      Manage your instances, access self-help, and get technical support.
How to delete an orphaned Identity Provider record from an instance showing SSO access denied - Support and Troubleshooting
  • >
  • Knowledge Base
  • >
  • Support and Troubleshooting (Knowledge Base)
  • >
  • How to delete an orphaned Identity Provider record from an instance showing SSO access denied
KB0727991

How to delete an orphaned Identity Provider record from an instance showing SSO access denied


5061 Views Last updated : Jun 20, 2023 public Copy Permalink
KB Summary by Now Assist

Issue

Orphaned IDP records may appear after cloning an instance. This can affect SSO authentication, preventing access with the error '‘Username or password not valid’.

In order to remove a sys_id-identified orphaned IDP record:

  1. Export the working IDP record as XML.
  2. Open the XML file you just exported and populate the sys_id of the IDP record that needs to be deleted inside the <sys_id></sys_id> tag
  3. Inside the <saml2_update1_properties> tag, replace "INSERT_OR_UPDATE" with "DELETE".
  4. Remove all other tags keeping only the sys_id tag.
  5. The XML file should look like this:
    <?xml version="1.0" encoding="UTF-8"?>
    <unload unload_date="2022-01-09 20:58:23">
    <saml2_update1_properties action="DELETE">
    <sys_id>4ae2d23adbe8230018dff46c0c961903</sys_id>
    </saml2_update1_properties>
    </unload>
  6. Go to the list view of the identity providers table.
  7. Right-click on the column header and choose Import XML.
  8. Upload this XML file and click on Upload.

Related Links

Administrator-assisted multi-factor authentication reset


The world works with ServiceNow.

Sign in for more! There's more content available only to authenticated users Sign in for more!
Did this KB article help you?
Did this KB article help you?

How would you rate your Now Support digital experience?

*

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

What can we improve? Please select all that apply.

What are we doing well? Please select all that apply.

Tell us more

*

Do you expect a response from this feedback?

  • Terms and conditions
  • Privacy statement
  • GDPR
  • Cookie policy
  • © 2025 ServiceNow. All rights reserved.