--- sourceDocument: Xanadu IT Asset Management sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/it-asset-management Release : - xanadu ft:locale : - en-US ft:publication_title : - Xanadu IT Asset Management ft:clusterId : - itam bundleId : - itam workflow : - Technology --- # Integrating with Jira Software Cloud # Integrating with Jira Software Cloud {#ariaid-title1} * Release version: Xanadu * * Updated August 1, 2024 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 10 minutes to read Integrating your Software Asset Management application with Atlassian Jira Software Cloud enables you to track your software subscriptions and to reclaim unused licenses. Note: Currently this integration supports only one site integration per profile. * If your installed Jira spoke version is 4.1.0 or higher, you can integrate Jira with your ServiceNow instance by using one of the following methods: * [Using basic authentication](https://www.servicenow.com/docs/GrRuMORuh4UoNi25_DQHYQ#use-basic-auth-jira "Integrate the Software Asset Management application and Jira using an API key to authenticate ServiceNow requests.") * [Using OAuth authentication](https://www.servicenow.com/docs/GrRuMORuh4UoNi25_DQHYQ#use-oauth-jira "Integrate the Software Asset Management application with your Jira account using OAuth to authenticate ServiceNow requests.") {#integrate-with-jira__ul_g5p_r4n_kxb} * If your installed Jira spoke version is lower than 4.1.0, integrate Jira with your ServiceNow instance by [Using basic authentication](https://www.servicenow.com/docs/GrRuMORuh4UoNi25_DQHYQ#use-basic-auth-jira "Integrate the Software Asset Management application and Jira using an API key to authenticate ServiceNow requests.") method. {#integrate-with-jira__ul_bkf_qwc_cxb} Important: Minimize security risks and protect information by granting access only to the necessary user or API permissions.{#integrate-with-jira__table_box__entry__3} | Process | Required user role in the Jira Software Cloud application | Authentication scopes | |-|-|-| | Download subscriptions | Permission to access Jira | * read:application-role:jira * read:group:jira * read:user:jira * read:avatar:jira {#integrate-with-jira__ul_pbx_m4p_pbc} | | Pull user activity | * Administer Jira global permission * Browse projects permission for the project containing the issue.If issue-level security is configured, issue-level security permission to view the issue. {#integrate-with-jira__ul_ut4_d3b_ybc} | * read:user:jira * read:issue-details:jira * read:audit-log:jira * read:avatar:jira * read:field-configuration:jira * read:issue-meta:jira {#integrate-with-jira__ul_ghz_lqp_pbc} | | Reclaim subscription | Site administration, that is, member of the site-admin group | * read:group:jira * write:group:jira {#integrate-with-jira__ul_iwr_j3b_ybc} | [Table 1. Minimal user permissions] {#integrate-with-jira__box-title} ## Using basic authentication {#ariaid-title2} Integrate the Software Asset Management application and Jira using an API key to authenticate ServiceNow requests. You can integrate a ServiceNow instance with multiple Jira instances. For this integration, create a connection and credential alias record and a connection record for each Jira instance. ### Create an Jira account API token {#ariaid-title3} Create an API token in Jira to authenticate requests. #### Before you begin Jira Role required: Refer the [Minimal user permissions](https://www.servicenow.com/docs/GrRuMORuh4UoNi25_DQHYQ#integrate-with-jira "Integrating your Software Asset Management application with Atlassian Jira Software Cloud enables you to track your software subscriptions and to reclaim unused licenses.") table. #### Procedure 1. Navigate to [Atlassian API Tokens](https://id.atlassian.com/manage/api-tokens). 2. Select Create API token. 3. Enter a name for your API token, then select Create. 4. Copy the API token and save it. You'll use the token later. {#create-jira-api-token__steps_tw4_fwg_ynb} ### Configure the connection and credential record {#ariaid-title4} Configure the default connection and credential alias record to authenticate the requests from ServiceNow. #### Before you begin Role required: admin #### Procedure 1. Navigate to AllConnections \& CredentialsConnection \& Credential Aliases. 2. Open the alias record for Jira that is shipped with the spoke. 3. Select the Create New Connection \& Credential related link. 4. On the form, fill in the fields. {#configure-basic-rec-jira__table_qcd_wh1_nwb__entry__2} | Field | Description | |-|-| | Connection URL | URL of your Jira instance in https://\.atlassian.net format. | | User Name | Enter the email address of the user. | | API Key | Enter the API token that you generated for Jira. | [Table 2. Create Connection and Credential] {#configure-basic-rec-jira__table_qcd_wh1_nwb} 5. Select Create. ## Using OAuth authentication {#ariaid-title5} Integrate the Software Asset Management application with your Jira account using OAuth to authenticate ServiceNow requests. ### Create an OAuth 2.0 integration in Jira account {#ariaid-title6} Create an OAuth 2.0 integration in the Atlassian Developer console to authenticate the requests. #### Before you begin Jira Role required: Refer the [Minimal user permissions](https://www.servicenow.com/docs/GrRuMORuh4UoNi25_DQHYQ#integrate-with-jira "Integrating your Software Asset Management application with Atlassian Jira Software Cloud enables you to track your software subscriptions and to reclaim unused licenses.") table. #### Procedure 1. Log in to [Atlassian Developer console](https://id.atlassian.com/login?continue=https://developer.atlassian.com/console/myapps/). 2. Under My apps, select Create and select OAuth 2.0 integration. 3. On the form, provide a name for the integration and select Create. The integration is created and the value of App ID is displayed. 4. Select Authorization. 1. Select Add under Action. 2. In Callback URL, provide the URL of your ServiceNow instance in this format: https://\.service-now.com/oauth_redirect.do. For example, https://example.service-now.com/oauth_redirect.do. 3. Select Save changes. {#create-oauth-int-jira__substeps_j1m_cd5_mwb} 5. Select Settings. 6. Under Authentication details, copy the values of Client ID and Client Secret. 7. Select PermissionsJira APIConfigure. 8. Select the Granular scopes tab. 9. Select Edit Scopes to add the following scopes: * read:application-role:jira * read:group:jira * read:user:jira * read:avatar:jira * read:audit-log:jira * read:issue-details:jira * read:field-configuration:jira * read:issue-meta:jira * write:group:jira {#create-oauth-int-jira__ul_jtr_h25_mwb}You can configure other scopes according to your requirement. ### Obtain the Cloud ID value of Jira instance {#ariaid-title7} Obtain the value of the Cloud ID of the Jira cloud instance. This value is required during the configuration of the connection record in your ServiceNow instance. #### Before you begin Jira Role required: admin #### Procedure 1. Log in to [Atlassian Administration](https://admin.atlassian.com/). 2. Select the Select button against the required organization. 3. Select the Products tab. 4. On the Products page, select Manage product on the Jira product row. The URL is in the following format in a new window: https://admin.atlassian.com/o/\/products/jira-software/\. 5. Copy the value of the Cloud ID for later use. ### Create an application registry in ServiceNow instance {#ariaid-title8} Use the generated information while creating the OAuth 2.0 integration to create an application registry record in your ServiceNow instance. #### Before you begin Role required: admin #### Procedure 1. Navigate to AllSystem OAuthApplication Registry. 2. Select New. The system displays a message as What kind of OAuth application?. 3. Select Connect to a third party OAuth Provider. 4. On the form, fill these values. {#create-app-reg-jira__table_smt_hg5_mwb__entry__2} | Field | Description | |-|-| | Name | Name to identify the application registry record. | | Client ID | Client ID generated when the OAuth 2.0 integration was created in the Atlassian Developer console. | | Client Secret | Client secret generated when the OAuth 2.0 integration was created in the Atlassian Developer console. | | Default Grant type | Grant type used to establish the token. Select Authorization Code. | | Authorization URL | OAuth authorization code endpoint. Enter https://auth.atlassian.com/authorize. | | Token URL | OAuth server token endpoint. Enter https://auth.atlassian.com/oauth/token. | | Redirect URL | OAuth callback endpoint. System generates the URL while saving the application registry. | | Refresh Token URL | URL to refresh a token. Enter https://auth.atlassian.com/oauth/token. Note: This field is hidden in the form layout. Configure the form layout to show this field. | [Table 3. Application Registries] {#create-app-reg-jira__table_smt_hg5_mwb} 5. Select and hold (or right-click) the form header and select Save. A default OAuth entity profile record is created in the OAuth Entity Profiles tab. 6. In the OAuth Entity Scopes, create the following entity scope records. {#create-app-reg-jira__table_ngc_3h5_mwb__entry__2} | Name | OAuth scope | |-|-| | read:application-role:jira | read:application-role:jira | | read:group:jira | read:group:jira | | read:user:jira | read:user:jira | | read:avatar:jira | read:avatar:jira | | read:audit-log:jira | read:audit-log:jira | | read:issue-details:jira | read:issue-details:jira | | read:field-configuration:jira | read:field-configuration:jira | | read:issue-meta:jira | read:issue-meta:jira | | write:group:jira | write:group:jira | | offline_access | offline_access | [ ] {#create-app-reg-jira__table_ngc_3h5_mwb} #### Result An application registry record is created in your ServiceNow instance. ### Create a credential record for Jira {#ariaid-title9} Create a credential record for the Jira account. The Jira spoke connection and credential alias uses this credential to authorize actions. #### Before you begin Role required: admin #### Procedure 1. Navigate to AllConnections \& CredentialsCredentials. 2. Select New. The system displays a message as What type of Credentials would you like to create?. 3. Select OAuth 2.0 Credentials. 4. On the form, fill these values. {#create-cred-rec-jira__table_zh1_gm5_mwb__entry__2} | Field | Description | |-|-| | Name | Name to identify the credential record for the Jira spoke. For example, Jira OAuth credential. | | OAuth Entity Profile | Default OAuth entity profile record created when the application registry record is configured. | [Table 4. OAuth 2.0 Credentials] {#create-cred-rec-jira__table_zh1_gm5_mwb} 5. Select Submit. ### Create a connection record for Jira {#ariaid-title10} Create a connection record for the Jira account. The connection and credential alias uses this connection to perform actions in Jira. #### Before you begin Role required: admin #### Procedure 1. Navigate to AllConnections \& CredentialsConnection \& Credential Aliases. 2. Open the alias record for Jira that is shipped with the spoke. 3. On the Connections tab, select New. 4. On the HTTP(s) Connection form, fill in these fields. {#create-conn-rec-jira__table_eqh_1n5_mwb__entry__2} | Field | Description | |-|-| | Name | Enter any unique name to identify the connection record. For example, enter Jira OAuth Connection. | | Credential | Select the Credential record created for Jira. For example, select Jira OAuth Credentials. | | Connection alias | Search for and select sn_jira_spoke.Jira alias. | | Connection URL | Enter the URL of your Jira instance in the https://api.atlassian.com/ex/jira/\ format. For information about getting the value of Cloud ID, see [Obtain the Cloud ID value of Jira instance](https://www.servicenow.com/docs/GrRuMORuh4UoNi25_DQHYQ#obt-val-cldid "Obtain the value of the Cloud ID of the Jira cloud instance. This value is required during the configuration of the connection record in your ServiceNow instance."). | [Table 5. HTTP(s) Connection] {#create-conn-rec-jira__table_eqh_1n5_mwb} 5. In the Attributes related list, provide these values. 1. Enter the value of 2 for api_version. 2. Enter the value cloud for server_type. {#create-conn-rec-jira__ol_q2g_4n5_mwb} 6. Select Submit. 7. Navigate to AllConnections \& CredentialsCredentials. 8. Open the credential record that you had created for the Jira spoke. For example, Jira OAuth credential. 9. Select the Get OAuth Token related link. In a new window, the system asks access to your Atlassian account. Note: For the role required to perform this step, refer to the [Minimal user permissions](https://www.servicenow.com/docs/GrRuMORuh4UoNi25_DQHYQ#integrate-with-jira "Integrating your Software Asset Management application with Atlassian Jira Software Cloud enables you to track your software subscriptions and to reclaim unused licenses.") table. 10. Select Accept. Access is granted to the Atlassian account and a confirmation message is displayed in your ServiceNow instance that the refresh token is available. ## Create a Jira Software Cloud integration profile {#ariaid-title11} Create an integration profile to track software subscriptions and optimize licensing for Atlassian Jira Software Cloud. ### Before you begin To create a Jira integration profile, request the Software Asset Management - SaaS License Management plugin (sn_sam_saas_int) from the [ServiceNow Store](https://store.servicenow.com/). To enable the integration profile to retrieve and update user activity through the Jira Update User Activity subflow, set the com.glide.transform.json.max-partial-length system property Value to 32768. Atlassian Role required: site admin ServiceNow Role required: * Starting with version 5.0.1 of Software Asset Management - SaaS License Management and version 3.0.4 of the Jira spoke, either of the following ServiceNow roles is required: * sam_integrator and sn_jira_spoke.jira_admin * admin {#create-integration-jira__ul_hjt_dys_xbc} * Prior to version 5.0.1 of Software Asset Management - SaaS License Management and version 3.0.4 of the Jira spoke, the sam_integrator or admin ServiceNow role is required. {#create-integration-jira__ul_zvw_1fp_wpb} ### About this task If you're using Software Asset Workspace, the option to create the Jira integration profile in Core UI is inactive. ### Procedure 1. Navigate to the integration profile. | Interface | Action | | Core UI | 1. Navigate to AllSoftware AssetSaaS LicenseDirect Integration Profiles. 2. Select New. 3. Select Jira Integration Profile. {#create-integration-jira__ol_ijd_bjk_qtb} | | Software Asset Workspace | 1. Navigate to License operationsUser SubscriptionsDirect integration profiles. 2. Select New. 3. Select Jira from the drop-down list. 4. Select Continue. {#create-integration-jira__ol_wjd_bjk_qtb} | |-|-| {#create-integration-jira__choicetable_o3p_z3k_qtb} 2. On the form, fill in the fields. {#create-integration-jira__table_iqh_2y5_mjb__entry__2} | Field | Value | |-|-| | Display name | Name of your choice. For example, Jira integration. | | Connection \& Credential | sn_jira_spoke.Jira. This field is automatically populated. | | Status | Status of the integration profile. The options are Draft and Published. This field is automatically populated. | | Profile type | Jira Subscription. This field is automatically populated. | [Table 6. Integration Profile form] {#create-integration-jira__table_iqh_2y5_mjb} 3. In the Calculate Activity Subflow form section, choose a value for the Analyze user activity from field. You can also select the date and time that you want to analyze user activity from in the Analyze user activity from field. By default, you can analyze user activity up to 60 days prior to the current date and view events performed by individual users from the time you create this profile. Note: Software Asset Management pulls the events from the time that you start analyzing user activity irrespective of the profile creation date. You can modify this value in the Last activity threshold field of your software reclamation rules. For more information, see [Review a software reclamation rule](https://www.servicenow.com/docs/nAflLzIGyHaK_OpPmTYTvw "Use reclamation rules to cancel user subscriptions that have limited to no activity."). Note: After you save the integration profile, the Analyze user activity from field becomes read only. 4. Select Save. A draft integration profile is created. The integration profile uses the Jira Download Subscriptions, Jira Update User Activity, and Jira Reclaim Subscription subflows to get user data from the Jira Software application. 5. Specify the groups that have access to Jira products. Important: This step is applicable only starting with version 5.0.1 of Software Asset Management - SaaS License Management Integrations and version 3.0.4 of the Jira spoke. By specifying these groups on your ServiceNow instance, you can retrieve data and manage licenses for only the users within these groups. 1. In a new tab, open the [Atlassian Administration portal](https://admin.atlassian.com/). 2. Log in to your site admin account. 3. Select the Select button against the required organization. 4. Select the Products tab. 5. On the Products page, select Manage product on the Jira product row. 6. View the list of groups that have access to Jira Software. Take note of this information for later use. 7. Return to your ServiceNow instance and navigate to JiraJira Groups. 8. On the Jira Groups form, select the Add Groups related link. The Add Jira Groups dialog box opens. 9. In the Available list, select the groups that have access to Jira products. Tip: The Available list includes all groups that are associated with your Atlassian account. Select only the groups that have access to Jira products. 10. Select the right arrow button to move the groups from the Available list to the Selected list. 11. Select OK. {#create-integration-jira__substeps_jtp_5sk_n4b} 6. Return to your integration profile and then select the integration profile. 7. Select Publish. 8. In the Publish Confirmation dialog box, select OK. ### What to do next After the integration connects, your ServiceNow instance automatically creates software models, reclamation rules, and software subscriptions that are refreshed daily. If you want to set up multiple integration profiles with unique connections, create child aliases to manage different configurations and settings for each integration profile. For more information, see [Create a child alias to set up multiple integration profiles](https://www.servicenow.com/docs/ank2kL8kWf4RhxBVQvFw5g "Create a child alias to set up multiple integration profiles with unique connections and manage different configurations for each integration profile."). Review all automatically generated reclamation rules to reclaim user subscriptions. For more information, see [Review a software reclamation rule](https://www.servicenow.com/docs/nAflLzIGyHaK_OpPmTYTvw "Use reclamation rules to cancel user subscriptions that have limited to no activity."). Create software entitlements for the automatically generated software models to track used software against owned software. * For more information on creating software entitlements in the Software Asset Management Core UI, see [Create entitlements in Software Asset Management classic](https://www.servicenow.com/docs/MAohEZPg4SjZLPTVioRdog "Create entitlements in the Software Asset Management application classic to record your license details and allocate purchased software rights to users or devices."). * For more information on creating software entitlements in the Software Asset Workspace, see [Create entitlements in workspace](https://www.servicenow.com/docs/Jh~FO6x8BChwOmSEDyY0kA "Create entitlements in the Software Asset Workspace to enter your license details and allocate purchased software rights to users or devices."). * For more information on creating software entitlements using the Software Asset Management Playbook, see [Create entitlements using the guided walk-through](https://www.servicenow.com/docs/Tiy_LA~jOKwaLS2ioqEHRA "Use the guided walk-through playbook for a step-by-step process of creating entitlements."). {#create-integration-jira__ul_cbz_vhr_sqb} Reconciliation also runs on your subscriptions as a scheduled job or on-demand. You can view your reconciliation results in the [License Workbench](https://www.servicenow.com/docs/O_bB4w6fQREuwthkTeWiqg "Review reconciliation results in a simplified workbench view.") (Software Asset Management classic application) or the [License usage view](https://www.servicenow.com/docs/UZ6v3AA1wKSbw~zTb_Xy6w "Use the license usage view as a single plane to understand the license position of all software products, remediate non-compliance, view reconciliation results, view, or add removal candidates, and view Software Asset Management related reports.") (Software Asset Workspace). Use these results to determine your license compliance position and to remediate any non-compliance. * For more information on running reconciliation in the Software Asset Management classic application, see [Run software reconciliation](https://www.servicenow.com/docs/xJni40GL3ctIVn4LYUkVVQ "Reconciliation is run as a scheduled job (default is weekly), but you can also run reconciliation manually to reconcile software products in your environment on demand."). * For more information on running reconciliation in the Software Asset Workspace, see [Run software reconciliation in the workspace](https://www.servicenow.com/docs/F4t9mIl3Z6yakXJGjLthTg "Reconciliation is run as a scheduled job (default is weekly), but you can also run reconciliation manually to reconcile software products in the Software Asset Workspace environment on-demand."). {#create-integration-jira__ul_qgf_zhr_sqb} *[\>]: and then