Azure AD application detail need to manage in servicenow
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-23-2025 01:09 AM
Hi Team,
We have a new requirement to store and manage (automate) the following data from Azure AD in the ServiceNow CMDB:
Store SSO-related applications in the CMDB and enable synchronization.
Store service accounts.
Store tenant details.
Store Entra ID information.
Please help us identify any existing OOTB (Out-of-the-Box) CMDB tables that can be leveraged for this.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-23-2025 11:33 AM
Hi Akshaya5
ServiceNow does have some OOTB capabilities for storing Azure/Microsoft identity information, though you might need a combination of existing tables and some customization to fully meet your requirements.
For SSO applications from Azure AD, you can leverage the oauth_entity table which is designed to store OAuth/OIDC provider information. The oauth_application table can store application-specific details. These tables are part of ServiceNow's identity management framework.
For service accounts, the sys_user table can technically store service accounts with a designation field or attribute to identify them as non-human accounts. Many organizations create a custom field on the user table to flag service accounts or use the "type" field.
For tenant details and Entra ID information, the cmdb_ci_azure_subscription table stores Azure subscription information, but you might need to extend this or create a related table for specific tenant details.
If this helps, please give it a helpful vote. And if it’s what you were looking for, go ahead and accept the solution. Thanks,
Daniel Madsen
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-02-2025 01:58 AM
Do we have "cmdb_ci_azure_subscription" table. I cant find any. What about custom table creation.?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-09-2025 11:50 AM
It seems like the table that is used going forward is cmdb_ci_cloud_service_account according to this knowledge article: Is cmdb_ci_azure_subscription still being populated by discovery via "Discover Subscription" UI Acti...
If this helps, please give it a helpful vote. And if it’s what you were looking for, go ahead and accept the solution. Thanks,
Daniel Madsen