Add username/password to a URL query that creates a CSV file?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-17-2012 12:16 PM
I would like to use:
https://instance.service-now.com/change_task.do?CSV&sysparm_query=u_category=Microsoft Patch^work_startONToday@javascript:gs.daysAgoStart(0)@javascript:gs.daysAgoEnd(0)
In script on a server to pull a CSV file in. I get authentication errors. Is there a way to add a username and password to the URL so that it can be passed to Service-Now from the server?
Thanks for the help
Jason
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-17-2012 03:07 PM
It's not good practice (since anyone with the link can see the password) but you could pass credentials in the URL.
https://username:password@instance.service-now.com/change_task.do?CSV....
Depending on your environment, you could also look into single sign on options for better security controls.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-18-2012 09:54 AM
Good point. In this case I think we would be ok with the username and password being known. It will be executed from a server, and there's only a couple of internal IS people that even have rights to the server.
Another note - I posted a question on your personal site about the article you have on this very subject. Do you mind taking a look at it when you get a chance?
Thank you very much for your help!
Jason

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-18-2012 10:04 AM
Oops..... John Andersen - not John Roberts...lol
I apologize for the confusion...

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎11-01-2012 04:27 AM
One thing I have noticed on this. We don't seem to get the desired results unless the username has the role of admin. We are okay with someone being able to physically see the username and password in the URL, but we're not okay with the account needing admin rights to perform correctly. Have I just not found the correct "level" of role? I'm thinking we may need to create a role just for this user and ad it to the tables that are needed...?
Thanks again for the help,
Jason