Integrate SN with multiple on-premises Active Directory Servers

VitalS
Tera Contributor

Hello SN community, I would like to ask the following question:
Is it possible to integrate a Cloud based SN instance with multiple on-premises Active Directory servers? Each AD manages a certain branch of the company.  Purpose of the integration is to import users and groups. If it is possible, what are the prerequisites? Do I need one or MID servers (one per AD server) to accomplish the integration? I do not want to expose the AD servers on the Internet, thus could a MID server help?

Thanks a lot, Vital.

2 REPLIES 2

Bhuvan
Mega Patron

@VitalS 

 

Yes it is supported. Follow below knowledge article for steps

 

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0862295

 

If this helped to answer your query, please mark it helpful & accept the solution.

 

Thanks,

Bhuvan

M Iftikhar
Mega Sage

Hi @VitalS

 

Yes, it is absolutely possible and a very common practice to integrate a cloud-based ServiceNow instance with multiple on-premises Active Directory (AD) servers. The key to achieving this without exposing your AD servers to the internet is to use one or more MID Servers. The MID Server is installed within your private network and acts as a secure proxy, polling the AD servers for user and group information and sending it securely to your ServiceNow instance over an outbound HTTPS connection.

 

The number of MID Servers you need depends on your network topology; if a single MID Server has network access to all your on-prem AD servers, you can use just one (though a cluster of two is recommended for redundancy). If your AD servers are in separate, firewalled network segments, you will need to install a dedicated MID Server in each segment. The main prerequisites are installing the MID Server, ensuring network connectivity from the MID to the ADs, and creating a read-only service account in each AD for the integration to use.

 

For official guidance, please see the ServiceNow Documentation:

Hope this helps!

 

Thanks & Regards,
Muhammad Iftikhar
If my response helped, please mark it as the accepted solution and helpful so others can benefit as well.