Password Reset Application

Jim Coyne · ‎08-13-2014

Anyone try using the new Password Reset application in Dublin / Eureka? I was wondering how easy it is to integrate with AD. How long did it take to get up and running? Pros? Cons? Any hidden issues?

I'm also wondering if the "Password Reset - Orchestration Add-on" requires the Orchestration plugin as well. I would assume so, the wiki does not explicitly say so, but I don't like to assume anything with SN licensing anymore.

Thanks

Jim

TrevorK · ‎08-19-2014

One of the challenges we found with the AD Password Reset is that, using the built-in ServiceNow workflow items, the account needed to be a Domain Administrator (which our AD Team would not allow). We ended up having to develop our own powershell command to do the password reset on the MID Server, rather than using the SN way of calling out to the DC. Not hard, but frustrating. It appears that those who do Discovery had the same sort of issues when I did a search at the time.

You can do the AD Password Reset without Orchestration as far as I recall when you write your own commands to work with the Powershell probe on the MID Server. We had to do this and I seem to recall thinking that it is a loophole or something, because you can write everything through the MID Server without much trouble.

One other thing we also found is that the ServiceNow SMS feature did not text to phone number, it texted to 11122233333@att.com, and thus required the carrier information to be present. We ended up just coding a call to Twilio, which was easy enough, and it handles the text to phone number (as our phone numbers sync from an external system).

We really found it was shoe-horning ServiceNow into a world where we could perform the tasks we need much better without ServiceNow (we need to share data with ERPs), and just use a web service to feed the data into ServiceNow about what is being done (failed attempts, successful attempts, etc). I also seem to recall that SN had a Password Reset app (above and beyond Orchestration) but you paid a monthly fee for each user in your system, and with 180,000+ users, that was not going to work too well for us.

I am using words like "I recall" and a lot of past tense because we are going a different route for password reset. But I have it all developed (without the use of Orchestration workflow items even though we have Orchestration) and such in our instance to demo the functionality of it.

Oh - I should also state I have only used this in Dublin/Calgary, not Eureka. We do not have that loaded yet.

Hopefully that helps. As you can tell, sometimes I ramble on too much.

View solution in original post

TrevorK · ‎09-09-2015

We use a custom built application to do our password resets.

That said, the application we built in ServiceNow (and ultimately decided not to use) just stores the verification code in a field on the user record (secured by ACL). Because the field is secured by an ACL, it is not

If you can be more specific as to what you are looking for, I can try to help. If you are storing the verification code in some sort of field then you would just reference that field through your mail script. You could also pass it into your notification as a parameter. I would assume that because you are sending an email, the verification code will always be stored somewhere in the system (if you are worried about it). You could always expire the verification code after an hour or so.

subash_biswas · ‎09-10-2015

Azenith Morenohas a similar thread going that is relevant Run Powershell - Add user to Security group not working

SJ9 · ‎12-09-2014

Hey there,

I've enabled the password rest application in Service Now but it does not appear as a module / application to do anything further with.

Everything looks ok from what I can tell, the password reset app is 'running' and its dependencies are all active.

I'm using my admin account which has permissions to it.

Has anyone seen this happen too?

Thanks for any advice,

Steve

TrevorK · ‎12-10-2014

Which plugin did you enable - Self Service Password Reset or Password Reset?

The Self Service Password Reset plugin does not give you any applications/modules. You have to modify it through the scripts and such.

The Password Reset plugin will enable some applications/modules.

SJ9 · ‎12-10-2014

Hi Trevor,

I enabled the Password Reset part (com.glideapp.password_reset).

I also checked and the Self Service Password Rest is also showing as active (I did not enable this one). No Password Reset shows under the Self Service Module in any case.

This is the Eureka version of Service Now.

Cheers,

Steve