Set up Microsoft Exchange Online spoke

Integrate the ServiceNow instance and Microsoft Exchange Online account by creating a custom OAuth application in Microsoft Exchange Online to authenticate ServiceNow requests.

始める前に

• Request an Integration Hub subscription.
• Activate the Microsoft Exchange Online spoke.
• Role required: admin.

Register an application using the Microsoft Azure portal

Provide authorization to the ServiceNow instance by registering an application with Azure AD.

始める前に

Role required: Azure Active Directory admin

このタスクについて

Complete these steps from the Microsoft Azure portal. For instructions on registering an application, see the Microsoft Azure documentation.

手順

1. In the Microsoft Azure portal, add the Redirect URIs in this format: https://<instance-name>.service-now.com/oauth_redirect.do
2. For the Required Permissions, select Microsoft Graph.
   
3. Record the Client Secret for use in later configurations.

タスクの結果

The ServiceNow application is created with Microsoft Azure AD.

Register Microsoft Exchange Online as the OAuth provider

Register Microsoft Exchange Online as the OAuth provider so that the ServiceNow instance can request OAuth 2.0 tokens.

始める前に

Role required: admin

このタスクについて

Use the information generated during the registration of the application in the Microsoft Azure portal.

手順

1. Navigate to All > System OAuth > Application Registry.
2. Open the record, Microsoft Exchange Online.
3. On the form, fill in the fields.

   表 : 1. Application Registries form

   Field	Description
   Name	Name to uniquely identify the record. For example, Microsoft Exchange Online.
   Client ID	Application ID created during application registration.
   Client Secret	Client secret created during application registration.
   OAuth API Script	Optional script to customize the request and response.
   Logo URL	URL that contains an image to use as the application logo.
   Default Grant Type	Grant type used to establish the token. Select Authorization Code.
   Refresh Token Lifespan	Time, in seconds, that the refresh token is valid. The default time is 8,640,0000 seconds.
   PKCE required	Option to enable public clients to require PKCE for an authorization. 注: You can use only Authorization Code as the Default Grant type when PKCE is enabled.
   Application	Application scope that contains this record.
   Accessible from	Application scope that this registry is accessible from.
   Active	Option to actively use the application registry.
   Authorization URL	OAuth authorization code endpoint. Enter https://login.microsoftonline.com/<Directory-ID>/oauth2/v2.0/authorize
   Token URL	OAuth server token endpoint. Enter https://login.microsoftonline.com/<Directory-ID>/oauth2/v2.0/token
   Token Revocation URL	OAuth server token revocation endpoint.
   Redirect URL	OAuth callback endpoint. Enter https://<instance-name>.service-now.com/oauth_redirect.do
   Use mutual authentication	Option to use mutual authentication for token request and revocation. This option requires a mutual authentication profile to be specified.
   Send Credentials	Client credentials in the request.

4. Right-click the form header, and click Save.
   A system-generated OAuth entity profile is created and displayed in the OAuth Entity Profiles related list. For example, Microsoft Exchange Online default_profile.
5. Navigate to System OAuth > Application Registry.
6. Open the record, Microsoft Exchange Online_clientCredentials.
7. On the form, fill in the fields.

   表 : 2. Application Registries form

   Field	Description
   Client ID	Application ID created during application registration.
   Client Secret	Client secret created during application registration.
   Default Grant Type	Grant type used to establish the token. Select Client Credentials.
   Token URL	OAuth server token endpoint. Enter https://login.microsoftonline.com/<Directory-ID>/oauth2/v2.0/token
   Redirect URL	OAuth callback endpoint. Enter https://<instance-name>.service-now.com/oauth_redirect.do

8. Right-click the form header, and click Save.
   A system-generated OAuth entity profile is created and displayed in the OAuth Entity Profiles related list. For example, Microsoft Exchange Online_clientCredentials default_profile.

Create credential records for the Microsoft Exchange Online spoke

Authorize the Microsoft Exchange Online spoke actions by creating credential records for the application registered in the Microsoft Azure portal. The Microsoft Exchange Online connection and credential alias uses these credentials to authorize actions.

始める前に

Role required: admin.

手順

1. Navigate to All > Connections & Credentials > Credentials.
2. Click New.
   The system displays the message, What type of Credentials would you like to create?
3. Select OAuth 2.0 Credentials.
4. On the form, fill in the fields.

   表 : 3. OAuth 2.0 Credentials form

   Field	Description
   Name	Name to uniquely identify the record. For example, Exchange_Online_Credentials.
   Active	Option to actively use the credential record.
   OAuth Entity Profile	OAuth profile created during the registration of Microsoft Exchange Online spoke as an OAuth provider with Default Grant Type as Authorization Code. For example, Microsoft Exchange Online.
   Applies to	MID Servers that can use this credential. For example, select All MID Servers.
   Order	Order that the credentials are used. For example, enter 100.

5. Right-click the form header and click Save.
6. To generate the OAuth token, click the Get OAuth Token related link.
7. Navigate to Connections & Credentials > Credentials.
8. Click New.
   The system displays the message, What type of Credentials would you like to create?
9. Select OAuth 2.0 Credentials.
10. On the form, fill in the fields.

    表 : 4. OAuth 2.0 Credentials form

    Field	Description
    Name	Name to uniquely identify the record. For example, Exchange_Online_Credentials_clientCred.
    Active	Option to actively use the credential record.
    OAuth Entity Profile	OAuth profile created during the registration of Microsoft Exchange Online spoke as an OAuth provider with Default Grant Type as Client Credentials. For example, Microsoft Exchange Online_clientCredentials default_profile.
    Applies to	MID Servers that can use this credential. For example, select All MID Servers.
    Order	Order that the credentials are used. For example, enter 100.

11. Right-click the form header and click Save.
12. To generate the OAuth token, click the Get OAuth Token related link.

タスクの結果

The credential records for the Microsoft Exchange Online spoke are created.

Create a credential record for the Microsoft Exchange Online spoke Mailbox actions

Create a credential record for the Microsoft Exchange Online spoke Mailbox actions. The Microsoft Exchange Online spoke connection and credential alias uses these credentials to authorize Mailbox actions.

始める前に

• Make sure that MID Server is setup and configured
• Make sure that Power Shell with EXO V2 module is installed. This module is required for executing Mailbox management actions.
• Role required: admin

手順

1. Navigate to All > Connections & Credentials > Credentials.
2. Click New.

   The system displays this message: What type of Credentials would you like to create?

3. Select Windows Credentials.
4. On the form, fill in the fields.

   表 : 5. Windows Credentials form

   Field	Description
   Name	Name to uniquely identify the record. For example, MS Exchange Online Mailbox Cred.
   Active	Option to actively use the credential record.
   User name	User name with access to the target Windows host.
   Password	Password for the account.
   Applies to	Option to specify if the credential applies to all MID Servers in your network, or to one or more Specific MID servers. Specify the MID Servers that should use this credential in the MID servers field.
   Order	Order to apply this credential. For example, 100.
   Credential alias	Credential alias associated with the spoke.

5. Right-click the form header and click Submit.

タスクの結果

A Windows Credential record is created for the Microsoft Exchange Online spoke Mailbox actions.

Create connection records for the Microsoft Exchange Online spoke

Perform actions in Microsoft Exchange Online by creating connection records for your Microsoft Exchange Online account. The Microsoft Exchange Online spoke connection and credential alias uses these connections to perform actions.

始める前に

Role required: admin.

手順

1. Navigate to All > Connections & Credentials > Connection & Credential Aliases.
2. Open the record, Microsoft_Exchange_Online.
3. In the Connections related list, click New.
4. On the form, fill in the fields.

   表 : 6. HTTP(s) Connection form

   Field	Description
   Name	Name to uniquely identify the record. For example, Exchange_Online_Connection.
   Credential	Credential record created for Microsoft Exchange Online. For example, Exchange_Online_Credentials.
   Connection alias	Alias record associated with this connection.
   URL builder	注: Do not select the check box.
   Connection URL	Connection URL. Enter https://graph.microsoft.com.
   Use MID server	Option to use a MID Server. If the check box is selected, define the fields in the Advanced MID Server Configuration related list.
   Active	Option to actively use the connection.
   Domain	Domain that the action or activity runs in.

5. Click Update.
6. Navigate to Connections & Credentials > Connection & Credential Aliases.
7. Open the record, Microsoft_Exchange_Online_clientCred.
8. In the Connections related list, click New.
9. On the form, fill in the fields.

   表 : 7. HTTP(s) Connection form

   Field	Description
   Name	Name to uniquely identify the record. For example, Exchange_Online_Connection_clientCred.
   Credential	Credential record created for Microsoft Exchange Online. For example, Exchange_Online_Credentials_clientCred.
   Connection alias	Alias record associated with this connection.
   URL builder	注: Do not select the check box.
   Connection URL	Connection URL. Enter https://graph.microsoft.com.
   Use MID server	Option to use a MID Server. If the check box is selected, define the fields in the Advanced MID Server Configuration related list.
   Active	Option to actively use the connection.
   Domain	Domain that the action or activity runs in.

10. Click Update.

タスクの結果

The Microsoft Exchange Online spoke is set up and integrated with the ServiceNow instance.

Create a connection record for the Microsoft Exchange Online spoke Mailbox actions

Create a connection record for your Microsoft Exchange Online spoke Mailbox actions. The Microsoft Exchange Online spoke connection and credential aliases use these connections to perform only Mailbox actions.

始める前に

• Make sure that MID Server is setup and configured
• Make sure that Power Shell with EXO V2 module is installed. This module is required for executing Mailbox management actions.
• Role required: admin

手順

1. Navigate to All > Connections & Credentials > Connections & Credentials Aliases.
2. Open the Microsoft Exchange Online MID record.
3. From the Connections tab, click New.
4. On the form, fill these fields.

   表 : 8. Connection form

   Field	Description
   Name	Name to uniquely identify the record. For example, MS Exchange Online Mailbox Connection.
   Credential	Credential record created for Microsoft Exchange Online spoke Mailbox actions. For example, MS Exchange Online spoke Mailbox Cred.
   Connection alias	Alias record associated with this connection.
   Connection URL	Base URL to connect to Microsoft Exchange Online. Enter: 127.0.0.1
   Active	Option to actively use the connection record.
   Domain	Domain that the action runs in.
   Override default port	Target port used by the connection. If blank, the system uses the default port.
   Use MID server	Option to use MID Servers for this connection. If the check box is selected, define the fields in the Advanced MID Server Configuration related list.

5. Click Submit.

タスクの結果

A connection record is created for Microsoft Exchange Online spoke Mailbox actions.