OIDC setup for integration users only via Microsoft Azure AD using custom claims

Daisy3
Tera Guru

‎01-08-2024 06:45 AM

We are trying to setup OIDC configuration for the non-SSO accounts (integration users) only, via Microsoft Azure AD. We need to fill the below fields (user claim and user field) to match the records. We would like to use this user_claim from the token to match the "user_name" in ServiceNow. We are not able to identify which claim in the token can be used for matching the user_name. Is there any existing claim that can be used or if do we need to add a custom claim. If we use a custom claim, where should we configure the same in Azure AD.

 

User Claim | user_claim
User Field | user_field
0 Helpfuls
  • 1,418 Views
1 REPLY 1

sourav1999
Mega Guru

‎01-23-2024 03:10 AM

Setting up OIDC configuration for non-SSO accounts via Microsoft Azure AD involves several steps. Here's a summary of the process:

1. Identify the User Claim: The user claim is a piece of information about the user that is included in the token. In Azure AD, the user claim can be the user's email, user principal name (UPN), or a custom attribute. If you want to match the user_name in ServiceNow, you can use the UPN as the user claim.

2. Configure User Claim in ServiceNow: In ServiceNow, go to the OIDC Provider record and set the User Claim field to "upn". This tells ServiceNow to use the UPN from the token to match the user_name.

3. Identify the User Field: The user field is the field in ServiceNow that is used to match the user claim. In this case, the user field should be set to "user_name".

4. Configure User Field in ServiceNow: In ServiceNow, go to the OIDC Provider record and set the User Field to "user_name". This tells ServiceNow to match the UPN from the token to the user_name in ServiceNow.

5. Add a Custom Claim (Optional): If the standard claims do not meet your needs, you can add a custom claim in Azure AD. To do this, go to the Azure portal, navigate to the Enterprise Applications section, select your application, and then go to the Token Configuration section. Here, you can add a new claim.

6. Configure Custom Claim in ServiceNow (Optional): If you added a custom claim, you need to configure ServiceNow to use this claim. In ServiceNow, go to the OIDC Provider record and set the User Claim field to the name of your custom claim.

 

For asking ServiceNow-related questions try this :
For a better and more optimistic result, please visit this website. It uses a Chat Generative Pre-Trained Transformer ( GPT ) technology for solving ServiceNow-related issues.
Link - nowgpt.ai

0 Helpfuls