Automating of provisioning users through Azure active directory as customers in CSM Portal

shalini36
Tera Contributor

Please let us know if it is possible to automate the provisioning of users as a customer contact in the Customer Service Portal(CSM) with the permission sn_customerservice.customer from Azure Active Directory . He should be able to login directly once his user account is pushed to servicenow from Azure active directory with the customer access permission(sn_customerservice.customer). Do we need any other plugin like orchestration or it would be possible without any other plugin.

1 ACCEPTED SOLUTION

Hi

"Is there an option in Azure AD to add the user as a contact"

--> Check at Azure AD whether you can provision the user to the customer_contact table

"provide the SSO source"

--> In case of a SSO-based login scenario, that property is transferred automatically by Azure AD. Whether this is also be possible for only provisioning I cannot tell you and you should ask this the Azure AD admins.

MKind regards
Maik

View solution in original post

3 REPLIES 3

Maik Skoddow
Tera Patron
Tera Patron

Hi

no, you don't need another plugin. All configurations can be done on Azure. On ServiceNow create an individual group for these contacts and assign the role sn_customerservice.customer to that group. Then at Azure configure that group as target for provisioning.

Kind regards
Maik

shalini36
Tera Contributor

Hi Maik,

 

Thank you for the response. Is there an option in Azure AD to add the user as a contact and provide the SSO source while provisioning from Azure AD. Or should we add it later once the user is pushed and created in servicenow.

Hi

"Is there an option in Azure AD to add the user as a contact"

--> Check at Azure AD whether you can provision the user to the customer_contact table

"provide the SSO source"

--> In case of a SSO-based login scenario, that property is transferred automatically by Azure AD. Whether this is also be possible for only provisioning I cannot tell you and you should ask this the Azure AD admins.

MKind regards
Maik