The CreatorCon Call for Content is officially open! Get started here.

Integrate the User table AD

Akhila P
Tera Contributor

Hi Everyone,

In my current ServiceNow instance, we’ve encountered an issue where user accounts are getting deactivated due to inactivity. The client has requested that this behavior be stopped, as they do not actively use ServiceNow.

Currently:

  • There is no AD integration in place for the User or Groups tables.
  • There is no SSO configuration; users log in using username and password.

To address this, I’m planning to integrate the User table with Active Directory (AD). However, I’ll be starting this from scratch and would really appreciate any guidance.

If anyone has experience with this or can share documentation or steps to help with the implementation, it would be extremely helpful.

Thank you in advance!

3 REPLIES 3

mujeebqasimi
Giga Contributor

https://www.youtube.com/watch?v=QCe4FRafUMs


I have done it using this video,

But I do recommend looking into this series, it uses current best practices.
https://www.youtube.com/watch?v=EuDmmcv2CLg

In this session, we explore how to integrate ServiceNow with Microsoft Entra ID (formerly Azure Active Directory) using the Microsoft Graph API. 🔍 What you'll learn: - How to register an application in Microsoft Entra (Azure AD) - How to configure permissions and obtain access tokens using OAuth2
In this session, we explore how to integrate ServiceNow with Microsoft Entra ID (formerly Azure Active Directory) using the Microsoft Graph API. 🔍 What you'll learn: - How to register an application in Microsoft Entra (Azure AD) - How to configure permissions and obtain access tokens using OAuth2

kaushal_snow
Mega Sage

@Akhila P ,

 

To integrate the User table (sys_user) with Active Directory from scratch in ServiceNow, first configure an LDAP Server under System LDAP > LDAP Servers with your AD details, credentials, and test connection; then define OU Definitions for Users (and Groups if needed), create a Data Source for LDAP, pull data into an Import Set, build a Transform Map to map AD attributes (like samAccountName, userPrincipalName, objectGUID etc.) to sys_user fields (and set Coalesce / matching logic), schedule or manually trigger Scheduled Loads to sync AD data into sys_user, and optionally use the Microsoft Active Directory v2 Spoke (via IntegrationHub & MID Server) to automate further user-enable/disable/admin tasks.........

 

If you found my response helpful, please mark it as ‘Accept as Solution’ and ‘Helpful’. This helps other community members find the right answer more easily and supports the community.

 

Thanks and Regards,
Kaushal Kumar Jha - ServiceNow Consultant - Lets connect on Linkedin: https://www.linkedin.com/in/kaushalkrjha/

Ankur Bawiskar
Tera Patron
Tera Patron

@Akhila P 

any custom logic is checking the last login time and deactivating those users?

search any scheduled job, scheduled flow etc

💡 If my response helped, please mark it as correct and close the thread 🔒— this helps future readers find the solution faster! 🙏

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader