Advantages of interacting via MID Server

Akihiko2 · ‎02-24-2022

Hello,

Our on-premise system has an external endpoint for the WebAPI.
The external endpoint is equipped with authentication and security.
Therefore, we believe that WebAPI integration between our on-premise system and ServiceNow is possible.
On the other hand, the MID Server is provided by ServiceNow.
Would it be better to communicate via MID Server instead of directly between the on-premise system and ServiceNow?
It would be helpful if you could tell me the advantages of going through MID.

#WebAPI (REST, SOAP, etc.)
#Authentication (OAuth (Client Credencials), Basic, Mutual TLS (mTLS), etc.)
#Security (WAF, FW, Anti-malware and DoS/DDoS measures etc.)

Thanks,
Akihiko

Maik Skoddow · ‎02-24-2022

Hi @Akihiko

there is no advantage using MID server in case your endpoint is reachable by ServiceNow directly.

A MID server is only required if ServiceNow cannot reach your corporate systems directly.

On the other hand, a MID server has to be hosted anywhere and this consumes resources and costs. And a MID server can cause many troubles (see my article MID Server Knowledge & Troubleshooting Resources)

Kind regards
Maik

View solution in original post

Akihiko2 · ‎02-27-2022

Thank you for your prompt reply.

>3)The MID server only initiates connections. It does not accept inbound communication, and does not open any ports. This makes it more acceptable to security teams.

I understand that the major advantage of the above is that it can realize a secure system by eliminating inbound communication.
I would like to discuss internally whether MID is necessary or not based on the contents of your answer.