Welcome to Community Week 2025! Join us to learn, connect, and be recognized as we celebrate the spirit of Community and the power of AI. Get the details  

List of suggested Exclude Tables and Preserve Data for cloning for SSO

MWright1
Giga Guru

This is a Re-post to the Developer forum from Admin...  in case I should have posted here instead...

https://www.servicenow.com/community/sysadmin-forum/list-of-suggested-exclude-tables-and-preserve-da...

-------------

Hi all,

 

I have searched high and low for this and cannot find any direct answer. The closest I got was a link posted by Aaron that no longer exists:

http://www.cloudsherpas.com/servicenow-implementation/servicenow-admin-101-system-clones-best-practi...

 

We use SSO on PROD and I am under the impression that if we clone to a TEST instance, the login method will become the same as PROD and therefore mess it all up.  Basically, we need to prevent SSO properties from getting cloned and overwritten.

 

I know I need to create Preserve Data in the target instance.  I have the list of the tables to preserve the Users:

sys_user
sys_user_role
sys_user_group
sys_user_grmember
sys_user_has_role
sys_group_has_role
sys_user_role_contains

 

What I am asking for is a list of tables I need to create in Preserve Data in the TEST instance to preserve SSO...  any help is highly appreciated.

1 ACCEPTED SOLUTION

Mark Endsley
Tera Guru

If it is not already excluded, I would think excluding the sys_certificate table would prevent this.

 

Also the sso_properties table.

View solution in original post

8 REPLIES 8

Mark Endsley
Tera Guru

If it is not already excluded, I would think excluding the sys_certificate table would prevent this.

 

Also the sso_properties table.

Thank you so much!  I added it.  Is there anything else I should be adding to the exclude table list that I should be aware of?

There is nothing else I can think of, but it may be worth opening a question with ServiceNow support in Hi to confirm.

Thank you so much.  I have opened a ticket with HI but I don't expect them to answer anytime soon.