Storing Discovery Credentials externally on a MID Server

richardwaugh
Giga Contributor

Hi,

I am hoping somebody can point me in the right direction with regard using Discovery and storing credentials on a MID Server,

We have set up our MID Server which appears to be functioning correctly and we are looking to store our Discovery credentials externally on our MID Server rather than storing credentials within ServiceNow.

We are using the details from the link below to try to set this up,

https://docs.servicenow.com/bundle/london-servicenow-platform/page/product/credentials/concept/exter...

Does anyone have more information on setting this up? 

Is there any way to encrypt the properties file?

Does the properties file require to be present on the MID Server once the JAR file has been created? 

If we create more MID Servers can the credentials be stored on only one server and point the new servers there or do they need to be stored on each server?

Many thanks in advance,

Richard

1 ACCEPTED SOLUTION

robertgeen
Tera Guru

So what the external credential storage enablement really does is allow you to create a jar file that will get called to pull back credentials. How you store them is really up to how you program the code in the JAR. You could encrypt them in a file and then un encrypt them to pull it back. What's important is that in the example code that they give you that you keep all the function calls and object names the same as it expects them to be like that. What code you reference within those objects and functions doesn't matter as long as it returns what it needs.

If you are going to do this from a file perspective each of the MID servers will have to have the file stored on it's file system as essentially they make a call to the JAR that is on the MID server to access the credentials so the file containing them has to be on each of the MID server.

Hope this helps.

View solution in original post

6 REPLIES 6

robertgeen
Tera Guru

So what the external credential storage enablement really does is allow you to create a jar file that will get called to pull back credentials. How you store them is really up to how you program the code in the JAR. You could encrypt them in a file and then un encrypt them to pull it back. What's important is that in the example code that they give you that you keep all the function calls and object names the same as it expects them to be like that. What code you reference within those objects and functions doesn't matter as long as it returns what it needs.

If you are going to do this from a file perspective each of the MID servers will have to have the file stored on it's file system as essentially they make a call to the JAR that is on the MID server to access the credentials so the file containing them has to be on each of the MID server.

Hope this helps.

Perfect thank you very much, I'll have a look into this, 

Excellent if you have any further questions let me know and when you feel your question is answered please mark a correct answer. Thank you!

Thanks, I think that has pointed me in the right direction, I'm just going to check a few things and I'll get it marked as complete, 

 

thanks again for your help,