Anyone designed Servicenow Sailpoint integration using midserver ?

[user678]

Looking for some help on Servicenow Sailpoint integration using midserver.

Data goes from SN --> midserver --> SailPoint.

[Christopher_Mal]

I have participated in several integrations similar to what you are asking.   I may be able to help.   Please be more specific in what you need and I can give it a go.

Also, it may be useful to know we have a few Sailpoint solutions certified and available on the App Store:

https://store.servicenow.com/$appstore.do#!/store/search?q=sailpoint

**Note - weird that my link above didn't take you to the sail point integration - but you will have to search sailpoint when you get to the store.  

[user678]

Thanks for your reply Chris.

We are looking to integrate SN with Sailpoint via MidServer for access provisioning.

Case:

Step 1 - User logs into SN.

Step 2 - Requests access for a business application via Catalog.

Step 3 - Once approved my the manager, it should trigger the data transfer from SN to MidServer.

Step 4 - Sailpoint will pull the data from the MidServer and provision the requested access to the specific application for the user.

Note: SailPoint is hosted on premise in the secured enterprise network, so we are using the mid-server in the DMZ zone. Please suggest if you feel any other utility/ middleware in place of MidServer would serve the purpose better.

Thanks in advance!!

Regards

[Christopher_Mal]

No problem at all.

Sounds like the MID Server is exactly what you need to talk to your Sailpoint service.   The question is exactly how do we talk to it.   ServiceNow supports a variety of ways, including our preferred method of web services.

One thing to take note of in your steps above is that Sailpoint does not talk to (or consume a MID Server endpoint).   If your desire is to query for data from the instance you can do so directly without going through a MID server.   If your ServiceNow instance needs to POST to your protected Sailpoint service we would use a MID Server - so direction of this request matters.

I will say this is a common scenario we handle and implement all the time successfully.

[user678]

The integration needs to be triggered once a user raises a request. As a result, SailPoint pulling data from the instance may not be the case if we need a dynamic response.

However, querying the instance every 5-10 mins from SailPoint side should help in case the stakeholders agree to delay the access provisioning by some minutes after they raise the request.

Please let me know if my understanding is correct.

Thanks!!