Service Mapping query

[Pranita Bahugun]

Hello everyone,

I have a quick question regarding Service Mapping implementation. Our MID Server is hosted on-premises, while the entry point for the service is a SaaS platform URL. I’d like to understand what requirements or configurations are needed to ensure the MID Server can successfully connect to the SaaS platform and build the service map.

Appreciate your guidance—thanks in advance!

Thanks,

Pranita Bahuguni

[M Iftikhar]

Hi @Pranita Bahugun, 

When using a SaaS URL as an entry point, Service Mapping will perform a top-down discovery. The level of detail in the resulting service map will depend on what the SaaS platform exposes publicly. The map will likely include the URL endpoint and any publicly accessible components, but it will not discover the internal infrastructure of the SaaS provider.

Here's the guide on how to install MID server:

https://pubs.lenovo.com/lxci-servicenow/servicenow_midserver_install_on_windows

and here's the guide on mid server proxy configuration:

https://www.servicenow.com/community/itom-forum/mid-server-proxy-configuration/m-p/963191 

Plus, here are the connectivity requirements:

• Outbound Internet Access: The server hosting your MID Server must have an active internet connection.

• Firewall Rules: Ensure that your network firewall allows outbound connections from the MID Server host on the ports required by the SaaS platform, which is typically port 443 for HTTPS.

• DNS Resolution: The MID Server host must be able to resolve the public DNS name of the SaaS URL.

Hope this helps!

Thanks & Regards,
Muhammad Iftikhar
If my response helped, please mark it as the accepted solution so others can benefit as well.

[Pratiksha]

@Pranita Bahugun 

When it comes to SAAS applications if they dont expose it to you then you cant map it. If any of the infra hosted on your side then the infra where it get navigated example a load balancer can be the entry point. 

If you are not hosting anything on your end and the service work on SAAS vendor infra then you cant map it. 

Which service you are trying to map? Are you hosting infra? Are you having permissions to go to SAAS vendor's infra to query?

I hope it helps. 

[Pranita Bahugun]

Hi @Pratiksha  

Thank you so much for helping clarify my query. Currently, when our on-prem MID Server attempts to reach the HTTPS URL, it fails to connect and isn’t able to discover the entry point component. Since all components are hosted in the cloud and nothing resides on-prem, I’d like to understand if it’s feasible to request credentials from the vendor to access and discover the components and their relationships. Would that be a workable approach?

Please let me know, Thanks!

[Pratiksha]

In my experience they will not give credentials. If it's your cloud, then yes you can ask the infra ppl to allow communication from mid server to the resource on cloud, here also they might say to host a mid on cloud so that they dont need to open ports. 

Please confirm with vendor if it's feasible.