Business rule condition - gs.getSession().isInteractive()

kchorny
Tera Guru

‎03-10-2016 07:14 AM

We have an issue with technicians manually creating users that should only be created through AD sync, resulting in multiple user records for the same person.   To address this, I've created a simple business rule, shown below.   This works (action is aborted, message displayed) when I try to create a user manually, but since I'm unable to test (I don't have rights to create users in AD and I don't know how long it will be before a new user is added there), I just want to verify that the conditions of this rule (gs.getSession().isInteractive()) will still allow the user to be created via AD sync.   I would also like confirmation that without this condition, user creation through AD sync wouldn't work correctly.

find_real_file.png

Thank you for your input in advance!

Karla

Preview file
63 KB
  • 5,387 Views
2 REPLIES 2

ghsrikanth
Tera Guru

‎03-10-2016 07:31 AM

Any SOAP update is a non-interactive session. Inbound SOAP Web Service Security - ServiceNow Wiki


"...web services requests are non-interactive, ServiceNow always requires the Authorization header during a request. "



If the update is happening through web services call like SOAP, REST - it will be non-interactive session.


Another non-interactive session example, I have faced myself is the update on Incidents through replying to the email. Its a non-interactive session, as the insert into Email is through web services.




Mark if it is helpful or correct, feedback is appreciated


kchorny
Tera Guru
In response to ghsrikanth

‎03-10-2016 07:41 AM

I believe it is the LDAP process that creates the users from AD.   The documentation on LDAP doesn't indicate whether it's interactive or not, but I would assume that it's not.


0 Helpfuls