Skip Navigation
Expand
Bypass SSO on BUI and agent console
Answer ID 11754   |   Last Review Date 05/06/2024

Is it possible to log into the BUI without SSO on an SSO enabled site?

Environment:  

Single Sign-on (SSO) on the Browser User Interface (BUI) and the agent console  

Resolution:  

If you have SSO set up on the Browser User Interface (BUI) and you need to log into the BUI with an account associated to a non-SSO profile, you can bypass SSO to login by modifying the URL for your BUI and adding /login?ll=1 to the end of it as follows;

https://[site]/AgentWeb/login?ll=1  (For example:  https://mysite.custhelp.com/AgentWeb/login?ll=1)

If you have an active Identity Provider set up in the Single Sign-On Configurations component and have enabled Web SSO on the Identity Provider so that the login window is now your Identity Provider (Service Provider Initiated SSO), you can also bypass logging into the agent desktop by using the launch URL for your site and clicking the 'Install Oracle Service Cloud - Internal Login' button;

https://[site]/cgi-bin/[interface].cfg/php/admin/launch.php  (For example: https://mysite.custhelp.com/cgi-bin/mysite.cfg/php/admin/launch.php)

If you log out of the agent desktop after logging in through the 'Install Oracle Service Cloud - Internal Login' button, the next time you launch the agent desktop from your computer, the SSO login window will present rather than the native B2C Service login and you will need to log in with your SSO credentials.  Although the 'Install Oracle Service Cloud - Internal Login' button is not a conventional way to log into the agent desktop, the launch URL will need to be accessed every time a non-SSO user needs to log in bypassing SSO via the 'Install Oracle Service Cloud - Internal Login' button.  

Notes: 

It is recommended that site administrators have an account that is associated to a non-SSO profile and an account that is associated to a SSO profile to log into your B2C Service instance.  In the event that your identity provider has issues causing you to be unable to log in with SSO or if you inadvertently mis-configure something during initial SSO set up and are unable to log into your instance with SSO, the 'Install Oracle Service Cloud - Internal Login' button will allow you to bypass SSO and you can log in with your account that does not have an SSO enabled profile.  You will also need your non-SSO enabled account to log into the upgrade clone or a newly re-created test site if SSO is set up on your production site.  During the cloning process, the SSO configuration from your production site is copied over to the clone site.  See also Testing Single Sign-On (SSO) with Upgrade, Clone or Test site