Saviynt's local auth url

[GauravJain]

Hi

We have configured SSO for our Saviynt environment. after this we have also setup MFA (or 2FA) where users need to enter their token value to login to Saviynt.

If for some reason MFA goes down then users wont be able to login into Saviynt. To avoid such scenario, do we have any other Saviynt  login url which can be used as a break glass support when SSO or MFA is down ?

Regards

Gaurav

[naveenss]

Hi @GauravJain As a best practice, it is not recommended to use local auth in the latest versions. In case of SSO failure, it is better to open a support ticket with Saviynt for further action. Please refer to the below forum post. 

https://forums.saviynt.com/t5/identity-governance/sso-bypass-url-backdoor-access-for-emergency/m-p/5...

Let me know if you have any questions!

[GauravJain]

Hi @naveenss thanks for quick revert.

what action saviynt support will take here? disable SSO config?

Also, does Saviynt still support this local auth url - https://{DOMAIN}.saviyntcloud.com/ECM/Login/authsaviynt

i saw it working for one of the links mentioned in forum post but doesn't work for my domain.

[Amit_Malik]

what action saviynt support will take here? disable SSO config?

I dont think they will disable SSO config unless it is agreed with customer and risks accepted by all parties.

Saviynt support will try to find root cause of issue, whether it's on IDP side or Saviynt side causing SSO failure. Which we can do ourself also in most cases.

https://{DOMAIN}.saviyntcloud.com/ECM/Login/authsaviynt

This link is not supported for customers. This is for Saviynt support to bypass SSO in emergency scenarios like the one you have mentioned

[GauravJain]

thanks @Amit_Malik . is there any alternative link available for customers?

[Amit_Malik · Accepted solution]

No , no SAML/SSO bypass url is available for customers as Saviynt doesn't recommend that. 

Saviynt support can disable SSO if customer understands and accepts risk of disabling it.

[GauravJain]

Thanks @Amit_Malik