How secure is data transfer in Software Asset Management publisher pack or SaaS integration

[Stu2025]

For example how robust and secure is SAM integration with Microsoft 365 ->

Microsoft 365 integration

or another example from the SaaS list would be Docusign

Integrating with Dropbox

Is it HTTPS/TLS level security - indeed is it potentially even more secure (I see there are 3 IDs are needed)

By the same token is the weaknesses the same as most IT solutions eg typically human error, social engineering etc 

[dreinhardt]

Hi @Stu2025,

The integrations are based on the methods provided by the publishers for retrieving data, which are usually controlled via corresponding “applications” in the individual portals. ServiceNow itself also provides a list of minimum permissions to keep access permisson on a low level - Integrating with Microsoft 365 (see table at the beginning of the page).

Otherwise, you have already answered your own question with regard to “the human problem.”

Best, Dennis

[Stu2025]

Yes indeed ServiceNow mentions minimum permissions for it to work I guess I am wondering

what are the security methods typically used in the end to end communication between Microsoft and ServiceNow here - OAuth1 or 2 HTTPS/TLS ? - what makes this connection secure