ServiceNow

Overview

The ServiceNow integration connects your ServiceNow instance to Oneleet and syncs your users as user account assets, so Oneleet can monitor who has access to your instance and whether they use multi-factor authentication (MFA).

What does Oneleet monitor?

• ServiceNow users (user accounts), including their roles and whether Enable Multifactor authentication is on
• Your instance’s MFA setting (the glide.authenticate.multifactor system property)

Inactive, locked-out, and web-service-only users can’t sign in to the ServiceNow UI, so the user MFA monitor marks them as not applicable. Users who sign in through SSO get MFA from your identity provider, which ServiceNow doesn’t report, so they may show MFA as disabled.

Setup

To set up the ServiceNow integration, navigate to Integrations > Add integration > ServiceNow.

Oneleet connects with an OAuth client credentials application that a ServiceNow admin creates:

1. Set the glide.oauth.inbound.client.credential.grant_type.enabled system property to true (create it as a true | false property if it doesn’t exist).
2. Create a user for the integration with Identity type set to Machine, and give it the adaptive_auth_admin and snc_read_only roles.
3. In Machine Identity Console > Inbound integrations, create an OAuth - Client credentials grant integration with that user as the OAuth Application User.
4. Create an auth scope limited to the Table API, select it, and keep Allow access only to APIs in selected scope checked.
5. Copy the Client ID and Client secret and paste them, with your instance name, into the Oneleet setup form.