Connecting SailPoint and ServiceNow CMDB

To connect SailPoint and ServiceNow CMDB, perform the following tasks:

Adding Discovery Connector in SailPoint

Discovery connectors have categories that encompass a group of discovery sources to find enterprise applications. You can automatically discover enterprise applications using discovery sources, which search for applications your organization has on-boarded or can on-board. For more information, refer to Discovering Enterprise Applications.

1. Go to Admin > Connections > Discovery Connectors.
2. Select Create Connector.
3. Select Connector Category.
4. Select Continue.
5. Search for a source type and select Configure.
6. Review the directions and select Start Connector Setup.

7. Review the pre-populated source name, source owner, and description. To update, select Edit.

   Note

   Source name must be unique.

8. (Optional) If enabled for your organization, select the Use a Credential Provider checkbox to manage the source's authentication using a credential provider.

   Note

   To add a Credential Provider in SailPoint, go to Admin > Connections > Credential Providers. For more information about credential providers, refer to Credential Providers.

9. Configure the authentication to allow SailPoint to connect to the source. For more information, refer to the Connection Settings page.

10. Select Finish. A test connection is performed in the background.

11. If the test connection is successful, your source is created, and you are prompted to run a discovery.

    • If you want to discover applications now, select Discover.

      • Additional Settings > Discovery Settings - The latest application discovery history is shown.
      • Additional Settings > Discovery Activity - Discovered applications are listed.

    • If you want to discover applications later, select Cancel. As no discovery has taken place, in the source details:

      • Additional Settings > Discovery Settings - The latest application discovery history is blank.
      • Additional Settings > Discovery Activity - No discovered applications are listed.

      You are navigated to the Sources page, where the source created is listed.

Base Configuration

Provide the base configuration parameters. Information you entered in the Connector Setup dialog is automatically entered into the fields in the Base Configuration page. You can edit this information, if necessary.

1. Enter a descriptive Connector Name for the connection.
2. Enter the Description that provides details necessary to distinguish it from similar connection sources.

3. In Connector Owner, enter the name of the owner responsible for administrating, operating and managing the source system.

4. Select Save.

Connection Settings

Choose the appropriate authentication type and provide the information required to connect and interact with the source.

You can configure your source using one of the following authentication types:

• Configure the Connection with Basic Authentication
• Configure the Connection with OAuth 2.0 Authentication

Configure the Connection with Basic Authentication

1. Enter the Host URL for the ServiceNow instance that is used for communication.
2. Select Basic as the Authentication Type.
3. Enter the Username and Password that have the appropriate permissions.
4. Select Save.

Configure the Connection with OAuth 2.0 Authentication

1. Enter the Host URL for the ServiceNow instance that is used for communication.
2. Select OAuth 2.0 as the Authentication Type. Select Refresh Token or Client Credentials as the Grant Type.

Refresh Token

1. Enter the Client ID and Client Secret for OAuth 2.0 authentication.

2. Enter the Refresh Token for OAuth 2.0 authentication. For more information on creating an OAuth 2.0 profile on your ServiceNow instance, refer to ServiceNow: Create an endpoint for clients to access instance.

   To create a refresh token, use the following cURL command:

   $ curl -d "grant_type=password&client_id=be3aeb583ace210011c15b24a43e25d8
   &client_secret=client_password
   &username=admin&password=admin"
   POST https://instancename.service-now.com/oauth_token.do
   

   For more information, refer to ServiceNow: OAuth API request parameters.

3. Select Save.

Client Credentials

1. Enter the OAuth 2.0 Token URL.

   For example, if you use the Okta External OIDC Provider:

   {yourOktaDomain.com}/oauth2/{authorizationServerId}/v1/token

   For example, if you use the Inbound client credentials grant type by ServiceNow:

   https://instancename.service-now.com/oauth_token.do

2. Enter the Client ID and Client Secret.

3. Select Save.

Review and Test

Perform a test to confirm the connection to SailPoint.

1. Go to Review and Test.

2. Confirm that the entries in each field are correct.

   If you note any mistakes, return to the section and make corrections.

3. Select Test Connection.

SailPoint Application Onboarding

SailPoint application onboarding enables you to easily onboard new applications and create sources following the successful onboarding of a discovery source. To use this feature, continue to Discovered Applications in the SailPoint user interface.

For more information, refer to Application Onboarding in the SailPoint SaaS documentation.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.