Integration with ISIM and AD

[kourosh]

Hi everybody,

We need to integration our ISIM (IBM Security Identity Manager) and Active Directory with ServiceNow. We have different Target Systems for our ISIM which means when an Identity created inside ISIM it will provision corresponding account to all Target Systems and when it is removed, it will be removed from all systems.

Now we want to use ServiceNow as an addition Target System for our IAM platform and at the same time provision AD groups to the corresponding account (inside ServiceNow) that privisioned from our IAM platform.

I have read alot about MID server I know that it is impossible to authenticat users through MID server.

Is there anyone who used ISIM (or other Identity manager) to migrate with ServerNow?

How we can provision accounts to SN? Do we need MID?

If we use ISIM to provision accounts to SN, is it possible to provision AD groups to right corresponding user (account)?

Our IAM platform has possiblity to call a service on SN and provision accounts there without any need for MID server. Is there any such service on SN that we can call?

Thanks

I appreciate all kind of advice.

[larstange]

Hi

We use ISIM and ServiceNow.

We have created an Inbound Account SOAP service on the ServiceNow side to insert and update user accounts. It also maintains the department structure.

Inbound web services

You could also build a REST service to do the same.

On the ISIM side the integration is build via TDI (Tivoli Directory Integrator) in a custom adaptor/program which then calls the ServiceNow webservice.

The midserver is not used here - instead our TDI server is allowed to connection to the ServiceNow instance through our firewall.