Microsoft Active Directory V2 Integration with ServiceNow

[Ankita Bisht]

Hi Community Members,

I recently implemented the Microsoft Active Directory (AD) V2 Spoke Integration in ServiceNow, and I must say it was one of the most interesting integrations I have worked on.

Problems Faced:

1. User Deprovisioning Process

There was a significant manual effort involved in removing users from the AD system, after which the changes would sync back to ServiceNow. With the help of the Microsoft AD V2 Spoke, this manual effort was greatly reduced. We leveraged the out-of-the-box (OOTB) Disable User action within a Flow Designer flow triggered by a termination catalog item. This automated the process of disabling users in AD.

2. Group Membership Management

Managing group memberships was also a manual process. With the legacy AD integration, administrators had to manually add or remove users from AD groups. Using the OOTB Add Users to Group and Remove Users from Group actions available in the MS AD V2 Spoke, we automated this entire process through Flow Designer.

3. Updating Extensible Attributes in AD

Another challenging requirement was to automate the update of an extensible attribute in the AD system, which was previously maintained manually. To achieve this, we made a small customization to the spoke's Update User action, and it worked like a charm!

For more details on the implementation, challenges, and lessons learned, stay tuned!