Configure Service Graph Connector for Microsoft SCCM to use Integrated Authentication

[Palani Chockali]

Section-1: Service Account User Setup (MS SQL Server Management Studio)

** Note: The values provided in these instructions are only for example. It will be different to your installation.

Create a domain service account user for the MID Server say 'mid_server'

Add a domain user as a login user

1.  Under 'Security' - 'Logins'

2.  Right click on 'Logins', select 'Add New'

3.  For 'Login name', Click on 'Search'

4.  For 'Locations', choose 'Entire directory'

5.  Under 'Enter the object name to select', type in 'mid_server'

6.  Click on 'Check Names' and click 'OK'

7.  Click on 'User Mapping'

8.  Select the database for SCCM, say 'somedb'

9.  Under 'Database role membership for somedb', check the 'db_datareader' role and click 'OK'

10. Validate the database connection for this user using any adhoc SQL tool

     - Host:somedb.snow.com

     - Port:1433

     - User: SomeDomain\mid_server

     - Database: somedb

11. Test Connection. 

12. Run a query to be safe: SELECT * from V_GS_COMPUTER_SYSTEM

The above test validates the domain user 'mid_server' has read permissions on this database and able to select data from SCCM tables

Section-2: Configure the policy

1. Go to 'Local Security Policy' on the windows machine where the mid agent is going to run

2. Go to 'Local Policies' and go to 'User Rights Assignment'

3. Double click on 'Log on as a service' and add the domain user. Domain user created above needs to have
    this property.

** Note: If you don't use 'Local Security Policy' and use a Global Policy, you need to push down the above property for the user in to that Windows machine

Section-3:  MID Server setup

1.  On the SNOW instance, create a mid user say for example 'mid_agent_user' with the 'mid_server' role

2.  Download the MSI package for the MID installation

3.  Install it on the Windows machine

4.  Fill in the prompts during installation of the MIS package:   

     - ServiceNow Instance URL: https://demo1.servicenow.com

     - ServiceNow MID Server Username: mid_agent_user

     - ServiceNow MID Server Password: xxxxxxx

4.  Click on 'Test Your Connection'

     - The above test validates communication to ServiceNow from the Windows machine

5.  Fill in the prompts to configure where the MID agent runs:

     - MID Server Name: sccm_demo

     - Service Account Name: Domain\mid_server (log in as a service user from (1))

     - Service Account Password: xxxxxxx
     ** Note: This is the user that is going to run the mid agent on the local box

6.  Click on 'Validate MID Service Settings'

7.  Click 'Next'

8.  Destination Folder: C:\somedir

9.  Click 'Next'

10. Check 'Start MID Server after installation'

11. Click 'Next'

12. Go to the directory and check out the MID logs

13. Go to the SNOW instance

14. Validate the MID

Section-4:  Validate the data source

1.  Go to any SCCM data source

2. If you have performed the guided set up steps, then you do not have to enable MID and Integrated
    Authentication at the data source level. If it was not done, then enable those two on a data source
    before testing.

3. Test load 20 records