Guide to Set Up Domain Separation in ITOM Module with Global MID Servers

Madhava B
Tera Contributor

Hi,

 

As an Architect, I was recently asked to provide a best possible solution to implement domain separation for ITOM Modules for a Service Provider (with around 500+ customers) with limited number of MID Servers.

 

Our Client didn't want to have MID Server per customer as it will become a huge investment and they can't control MID Servers in customer environment.

 

It was challenging to achieve domain separation without MID Servers in every customer environment. Then came to know about MID Server capability, A MID Server in a global domain can server multiple domains. MID Servers needs to configured to achieve this.

 

High Level Steps to Achieve domain separation in Discovery with a Global MID Server,

 

1. Enable glide.ecc.enable_multidomain_mid property (https://docs.servicenow.com/bundle/xanadu-servicenow-platform/page/product/mid-server/concept/c_MIDS...)

2. Create MID Server User in Global Domain and use same user to connect to Instance

3. Create Discovery Schedules in Specific domain and configure Run As User from Specific domain

4. Run Discovery to get CIs into Specific Domain.

 

High Level Steps to Achieve domain separation in Event Management with a Global MID Server,

 

1. Enable glide.ecc.enable_multidomain_mid property (https://docs.servicenow.com/bundle/xanadu-servicenow-platform/page/product/mid-server/concept/c_MIDS...)

2. Create MID Server User in Global Domain and use same user to connect to Instance

3. Configure https://docs.servicenow.com/bundle/xanadu-it-operations-management/page/product/event-management/tas... 

4. Enable Event Connector to get events into Specific domain

 

Please refer arch diagrams for more info.

 

At NewRocket, we have dedicated team for ITOM Capability and have experience in configuring domain separation for large Service Provider environments. Contact us if you need more information and help to configure domain separation for your Instance.

 

Regards,

Madhava

 

 

 

1 REPLY 1

Krunal_Mankar
Tera Contributor

Thank you so much Madhava!!

I am, little confuse on this as per doug_schulze  No, domain separation works on the user, you have configured it correctly. You cannot have a midserver run as a global user and update a CI in a sub-domain, you will have to create the users in each company . 

 

Pleasw refer:  https://www.servicenow.com/community/itom-forum/how-does-mid-server-domain-seperation-work/m-p/99577...

can you please explain me how we can set up discovery/Servicemapping in Domail seperated invironment? 

Where should we create the MID server user? 

Which mid server user credential should we use to configure mid server?

How mid server will work in domain seperarted environment?

where should be configure the patterns, probes, sensor, or classifiers?