This was over four years ago and at the time Aveksa (AGS) did not APIs. What we ended up using were JDBC calls through the ServiceNow Mid Server to collate the data. We get an update from Aveksa once a week.
The latest version of AGS does have web services so I would configure that way instead.
Roles are created in AGS, then pushed into IBM Tivoli Identity Manager (ITIM), where an erglobal id is returned and periodically we run an import from AGS to get the roles and erglobal ids so then ServiceNow can autoprovision the access to ITIM using the new roles.
Here is a screen shot of the JDBC connections. We have four of them and they have to run in order of Application, Application Roles, Application Options, and then Business Roles and Children based on the relationships they have established.
