Need Service Catalog Item for external users
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-22-2024 12:27 AM
Hi Experts,
I've currently a requirement where i need to create a catalog item for external Company users ( more than 20000 ) , currently they rely on emails to communicate requirements.
We can't create their users on our system.
Is there a way to make this single catalog available publicly for external users ?
Regards,
Varun Sharma
- Labels:
-
Service Catalog
-
Service Portal
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-22-2024 01:26 AM - edited 07-22-2024 01:27 AM
Hi @Varun Sharma,
Whilst this is technically possible via a Record Producer which can be made public for example, you should absolutely consider the consequences of making a page public. This essentially means it will be open on the internet for anyone, anywhere, anytime and could potentially cause a bigger problem than the current email process.
You've mentioned you cannot create users on your system for this use case - is there a reason why? Is there any other criteria you can restrict these users? For example a trusted IP range?
Based on recent events, security should always be first and central around any solution, not just convenience.
Take a look at this link re restricting a Portal page which would host the Record Producer via IP ranges: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0813196
To help others (or for me to help you more directly), please mark this response correct by clicking on Accept as Solution and/or Kudos.
Thanks, Robbie
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-22-2024 02:08 AM
Hi Robbie,
Thanks for Responding.
I can not create those users record , since they are not part of organisation and are third party to a very small project within the organisation , it's not ideal to have their details stored on system when they are not directly related to the organisation .
i understand the security concern, but the scope of that public page if fairly limited , it'll only take limited information and only in prescribed format, but security is definitely a concern.
i'd appreciate if you've any ideas around this requirement.
Regards,
Varun Sharma
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-13-2025 07:56 PM
Were you able to set this up?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-17-2025 06:16 PM
i didn't bcs of the security issues, right now i've made inbound emails as a way to create records, and going with that.
Thanks for your input.
Regards,
Varun Sharma