Sync(schedule) group membership from AD/active directory to ServiceNow

[Venkata1]

Hello, 

I am looking for some guidance/help on how to sync members of a AD groups to ServiceNow group in regular intervals to snow 

I started with LDAP but need some suggestions on how to implement it. 

Thank You

Venkata

[_ChrisHelming]

Active Directory "speaks" LDAP. So you set it up similarly to how you'd set up an OpenLDAP: https://docs.servicenow.com/bundle/rome-platform-administration/page/integrate/ldap/concept/c_LDAPIn...

[shloke04]

Hi,

This happens OOB. You just need to configure your LDAP Server and fill out the details as shown below:

Navigate to Create New Server module and fill out the details as shown below:

Now once this is done, open the LDAP Server Record and you will fond below two OU defined as shown below:

Groups OU if you open this there is a Data Source and Transform Map defined, you just need to confirm with your AD team if all details like RDN Name and OU are properly configured or not which is just a configuration.

No code is needed here unless specific requirement.

Within this OU, Transform maps are there and there is an On After Transform script which control addition of group members to a group when it is added in AD:

 

Above highlighted line is responsible for adding group members automatically once the sync happens between ServiceNow and AD.

Below are scheduled job which you can execute manually or define the frequency to set up this import:

Hope this helps. Please mark the answer as correct/helpful based on impact.

Regards,
Shloke

[shloke04]

Also refer to below links which explains clearly on how to set up your LDAP:

https://dxsherpa.com/blogs/ldap-integration-with-servicenow/

https://www.servicenowelite.com/blog/2019/8/4/ldap-integration

Hope this helps. Please mark the answer as correct/helpful based on impact.

Regards,
Shloke