Azure AD application detail need to manage in servicenow

Akshaya5
Tera Contributor

Hi Team,

We have a new requirement to store and manage (automate) the following data from Azure AD in the ServiceNow CMDB:

Store SSO-related applications in the CMDB and enable synchronization.

Store service accounts.

Store tenant details.

Store Entra ID information.

Please help us identify any existing OOTB (Out-of-the-Box) CMDB tables that can be leveraged for this.

4 REPLIES 4

Daniel Madsen
Kilo Sage

Hi Akshaya5

 

ServiceNow does have some OOTB capabilities for storing Azure/Microsoft identity information, though you might need a combination of existing tables and some customization to fully meet your requirements.

 

For SSO applications from Azure AD, you can leverage the oauth_entity table which is designed to store OAuth/OIDC provider information. The oauth_application table can store application-specific details. These tables are part of ServiceNow's identity management framework.

 

For service accounts, the sys_user table can technically store service accounts with a designation field or attribute to identify them as non-human accounts. Many organizations create a custom field on the user table to flag service accounts or use the "type" field.

 

For tenant details and Entra ID information, the cmdb_ci_azure_subscription table stores Azure subscription information, but you might need to extend this or create a related table for specific tenant details.

 

If this helps, please give it a helpful vote. And if it’s what you were looking for, go ahead and accept the solution. Thanks,
Daniel Madsen

Akshaya5
Tera Contributor

 Do we have "cmdb_ci_azure_subscription" table. I cant find any. What about custom table creation.?

It seems like the table that is used going forward is cmdb_ci_cloud_service_account according to this knowledge article: Is cmdb_ci_azure_subscription still being populated by discovery via "Discover Subscription" UI Acti...

 

 

If this helps, please give it a helpful vote. And if it’s what you were looking for, go ahead and accept the solution. Thanks,
Daniel Madsen

grundy2
Mega Contributor

Hi! We are looking to do the same CMDB option to store information about SSO applications. Did you find a solution to do this?