Azure Active Directory Integration with ServiceNow in Kingston.

Pooja122
Kilo Contributor

Hi all,

Can you please guide me to perform Azure AD integration with ServiceNow in Kingston so that I could get user data from Azure AD to ServiceNow?

Also, I have gone through the document Tutorial: Azure Active Directory integration with ServiceNow and have few questions regarding integration:

1.  Do we need to create transform map or it is created automatically? If yes, where we could see that?

2. After performing the steps in above mentioned document, will my users from AD get loaded in ServiceNow or I need to do something else to achieve it?

3. If there is any change in user data, will it be reflected in ServiceNow? How frequently it can be done? 

4. How synchronization or listener works in this integration?

5. What should I do first - User Provisioning or SSO?

6. How linking between user table and reference tables i.e Department, Company, Location done after integration?

Thanks in advance 🙂

 

11 REPLIES 11

shawna
Tera Guru
  1. The transform map will be automatically generated: it can be accessed via Multi-Provider SSO -> Identity Provider -> Microsoft Azure Federated Single Sign-on for ***  ->Related Links ->  User Provisioning Map . the transformation map seems only for generating SAML token. there is no transformation map for user attributes and groups. 
  2. The users will be automatically provisioned if you select to do so
  3. Yes, the change will be automatically reflected in ServiceNow, although we had issues, such as User Security Group, Title, manager are not reflected. You will need to look through the audit log and resolve any issues. The issues we were able to identify are:
    • duplicated security groups (both AD on premise and Azure AD) will cause the AD group sync errors
    • reference fields such as department. the value options in ServiceNow need to be consistent in Azure AD. Otherwise there will be errors when azure ad push value to ServiceNow
  4. Most integration has been on Azure side and via direct web api
  5. SSO first and then User Provisioning as indicated in the doc
  6. It can be configured in the Azure AD via the mapping, although you need to watch out the value options. they need to be synced in Azure AD and ServiceNow. if the value in Azure AD user attribute doesn't match the value in ServiceNow, it will generate errors.  

Can we access servicenow table api using azure ad credentials after this configuration?

Community Alums
Not applicable

Hi Pooja,

I have same queries? whether your questions are answered.

Please help me on the same.

 

Regards,

Amutha

Hi Amutha,

I got the answers for my questions. I have implemented Servicenow integration with Azure AD for User data. 

I followed the steps given in Tutorial: Azure Active Directory integration with ServiceNow .

Regards,

Pooja