Azure Key vault as a external credential storage

Aryan_B
Tera Contributor

Has any one used Azure Key vault as a external credential storage in ServiceNow for discovery?  I did not find external credential storage plugin separately in ServiceNow store. As per document it says you need to request it through High portal.  I saw 3rd party credential resolvers apps for Cyberark , Beyon Trust or Hashicorp for which prerequisite is external credential storage app. It's bit confusing for me. Can someone please provide more information on this.

3 REPLIES 3

Kevin Velovski
Kilo Guru

James Behrens
Giga Guru

How can we find out what is on the roadmap for external credential solutions for ServiceNow? I'm specifically curious about Beyond Trust 

Nm.. if copilot can be trusted... 

ServiceNow already supports BeyondTrust as part of its External Credential Storage roadmap for use in Discovery, Orchestration, and Service Mapping—it’s not just a future plan; it’s available now. Here’s a breakdown:


“External Credential Storage” Support (Available Today)

  • ServiceNow Platform Releases (Yokohama/Xanadu) include built-in support for using BeyondTrust (alongside CyberArk) as an external credential store. The ServiceNow MID Server retrieves credential IDs from the instance, then uses a vendor-supplied JAR to fetch actual credentials from BeyondTrust. [servicenow.com], [support.se…icenow.com]

  • The ServiceNow Store app, Password Safe External Credential Storage for Discovery, integrates BeyondTrust Password Safe to securely handle credentials externally. It supports various credential types (Windows, SSH, Azure, excluding SNMPv3). [store.servicenow.com], [servicenow.com]


🛠️ BeyondTrust Documentation

  • BeyondTrust’s documentation clearly outlines how to install and configure the ServiceNow External Credential Provider plugin, enabling the MID Server to fetch Discovery credentials directly from Password Safe. [docs.beyondtrust.com], [docs.beyondtrust.com]

🔄 How to Verify / Track Roadmap Status

  1. Review ServiceNow Release Notes
    Check the YAML/Anitya documentation (“External credential storage”) in Yokohama, Xanadu, etc., for roadmap status and new feature announcements.

  2. Browse the ServiceNow Store
    The “Password Safe External Credential Storage for Discovery” app page includes version history and release notes detailing current and planned enhancements. [store.servicenow.com]

  3. Ask in ServiceNow Community Q\&A
    Searching the community (e.g., “BeyondTrust External Credential”) reveals ongoing discussions and bug reports (like domain account limitations). You can post your own query to check upcoming roadmap features. [support.se…icenow.com]

  4. Contact ServiceNow Product/Support Team
    For upcoming roadmap details beyond public documentation, engage through your ServiceNow account rep or submit a feature enhancement request (FER) via Now Support.


Summary

  • Status: Fully supported – BeyondTrust is already on the ServiceNow External Credential Storage roadmap and in production with Yokohama/Xanadu.
  • To Track What's Next:
    • Monitor official ServiceNow release notes → verify external credential enhancements.
    • Follow app-level release notes in the Store.
    • Raise questions or feature requests in the ServiceNow Community or through ServiceNow support.

Let me know if you'd like direct links to the Store app or relevant documentation!Do you want me to share the direct links to the ServiceNow Store app and BeyondTrust setup guide?