Scripted SOAP web services
Summarize
Summary of Scripted SOAP Web Services API Implementation
Scripted SOAP web services enable ServiceNow administrators to create custom SOAP web services, defining input and output parameters using JavaScript. While powerful, it is recommended to use direct web services or SOAP web service import sets for simpler implementation and maintenance.
Show less
Key Features
- Security: Scripted SOAP web services share the same security options as all SOAP web services. Users must have the soapscript role to execute the service when strict security is enforced.
- WSDL Generation: ServiceNow automatically generates WSDL XML documents that outline table schemas and operations. The WSDL for scripted services is based on defined input and output parameters.
- WSDL Compliance: Enforcing WSDL compliance ensures response output values are in the order specified in the WSDL. If selected, only parameters defined in the Response Parameters related list are included in the response.
- Static WSDL Creation: Create static WSDLs to meet specific client requirements that differ from the standard ServiceNow format.
- Global Variables: Use global variables like soapRequestDocument and response to manage incoming requests and customize responses.
Key Outcomes
By utilizing scripted SOAP web services, ServiceNow customers can build tailored SOAP services that meet specific business needs while ensuring compliance with security and WSDL requirements. This functionality enhances integration capabilities and allows for custom processing of SOAP requests, ultimately improving system interoperability and user experience.
Scripted SOAP web services allow a ServiceNow administrator to create custom SOAP web services.
You can define input and output parameters for the SOAP web service and use JavaScript to perform operations. Though this feature is very powerful, use direct web services or SOAP web service import sets whenever possible since they are simpler to implement and maintain.
Security
Scripted SOAP web services have the same base security options as all SOAP web services. For details on SOAP web services security, see SOAP web services security.
When strict security is enforced on a system, the HTTP authenticated user must have the soap_script role to execute the scripted web service.
WSDL
All ServiceNow tables and import sets dynamically generate Web Service Definition Language (WSDL) XML documents that describe its table schema and available operations.
Enforcing WSDL compliance
You can force the response to list output values in the same order as defined in the WSDL.
When you create a scripted SOAP web service, the generated WSDL is based on the Input Parameters and Output Parameters related lists. The actual SOAP response sent by the scripted service is determined by the Script. This behavior can cause the script to return output values in a different order than defined in the WSDL.
| Parameter | Order |
|---|---|
| Param 1 | 200 |
| Param 2 | 300 |
| Param 3 | 100 |
The following is the script that sets values for the defined output parameters. Note that in this example script the parameters are set in a different order than defined in the Output Parameters related list. Also note the additional parameter param4 that is not defined in the related list.
Response.param1 = 1;
Response.param4 = 4;
Response.param3 = 3;
When the WSDL Compliance check box is false, the SOAP response generated by the script is the following:
<response>
<param1>1</param1>
<param4>4</param1>
<param3>3</param1>
</response>
<response>
<param3>3</param1>
<param1>1</param1>
</response>Static WSDL
Some web service clients require SOAP access to your instance through a specific WSDL format. This required format may differ from the standard ServiceNow WSDL format. In these cases you can create a static WSDL that matches the required format.
Global variables
- soapRequestDocument: Java org.w3c.dom.Document object representing the incoming SOAP envelope.
- soapRequestXML: String object representing the incoming SOAP envelope XML.
- request: Javascript object that contains mapped values (mapped to input parameter names) of the incoming SOAP envelope.
- response: Javascript object that allows you to customize the response values. See Customize Response