AD integration query

[John Robinson1]

We have set up AD integration with our users.ou on AD to authenticate users sign on to ServiceNow.

We have a requirement to ONLY give access to users that are defined in the AD group called ServiceNow.

When we pointed our LDAP at ServiceNow Group it did not authenticate the users, we can only get authentication through  user.ou.

How can we achieve authenentication for just the ServiceNow group, when the user.ou contains everyones access and is used by other applications so we cant change that.

I appreciate that we can control access to applications trought ServiceNow but our customer is wants NO access.

[Luiz Lucena]

Hi @John Robinson1 ,

That should be simple.
For example, you are importing that group into ServiceNow, right?
Then, you assign whatever roles they need to that group, for example, ITIL role.
Then, any group member for that group will be able to login. 

Here in the company we have hundreds of groups with ITIL role allowing them to access ServiceNow "fulfiller" view.
And only one group with admin role.

Login through SSO is through users though.

Forgot to mention, you must have at least two LDAP imports, one for users and one for groups. 
We have at least 15 different LDAP imports for different groups and accesses. 

Let me know if that helps or if you need additional information.

[Dr Atul G- LNG]

Hi @John Robinson1 

This video will help you to understand

https://youtu.be/JJL6ZbSB3FQ