Prerequisites

Update the files you downloaded from SailPoint’s Compass Community site as follows:

• Update the SP_SPNT_SNOW_INT_IIQServiceNowStatusMapping.xml file by mapping each possible IdentityIQ identity request completion status key to a ServiceNow RITM status value. ServiceNow will update a request’s state and stage based on the corresponding status sent from IdentityIQ.

  In this example, ServiceNow will treat requests with a "Failure" or "Incomplete" status in IdentityIQ as "Close Incomplete", while requests resulting in "Success" will be marked as "Close Complete".

  Copy

  Completion Status Map Example

  <Custom name="SP_SPNT_SNOW_INT_IIQServiceNowStatusMapping">
    <Attributes>
      <Map>
        <entry key="completionStatusMap">
          <value>
            <Map>
              <entry key="Failure" value="4"/>
              <entry key="Incomplete" value="4"/>
              <entry key="Success" value="3"/>
            </map>
          </value>
        </entry>
      </map>      
    </Attributes>
  </Custom>  
  

• Update the SP_SPNT_SNOW_INT_ServiceNowCredentialConfig.xml file with the URL of your ServiceNow instance and path to the REST API service, as well as the iiq_integration_user credentials (username and password) required to connect to it. For more information about creating the iiq_integration_user, refer to Create a proxy user.

  In the IdentityIQ console, run the encrypt<password> command to encrypt the plaintext password, then copy the encrypted value into the config file as shown below.

  Copy

  Encrypt Password Example

  <?xml version='1.0' encoding='UTF-8'?>
  <!DOCTYPE Custom PUBLIC "sailpoint.dtd" "sailpoint.dtd">
  <Custom  name="SP_SPNT_SNOW_INT_ServiceNowCredentialConfig">
    <Attributes>
      <Map>
        <entry key="clientId" value="CLIENT_ID_VALUE"/>
        <entry key="clientSecret" value="ENCRYPTED_CLIENT_SECRET_VALUE"/>
        <entry key="enableOauth2" value="false"/>
        <entry key="password" value="ENCRYPTED_USER_PASSWORD_VALUE"/>
        <entry key="tokenURL" value="https://venxxxx.service-now.com/oauth_token.do"/>
        <entry key="url" value="https://venxxxx.service-now.com/api/x_sap_integration/sp_spnt_snow_int_updateritm/"/>
        <entry key="username" value="USERNAME_VALUE"/>
      </Map>
    </Attributes>
  </Custom>

• Ensure that your ServiceNow MID Server is configured to communicate with the SailPoint IdentityIQ server. For more information, refer to Best practices for MID Server setup and tuning.

• A supported SailPoint platform: An instance of a SailPoint with access requests enabled that you are authorized to access as an administrator.

• A supported version of ServiceNow that you are authorized to access as an administrator.

• A source of ServiceNow accounts that SailPoint can load account information from, so each account can be associated with an identity and access for each identity can be governed.

• Permission to manage OAuth2 client applications in ServiceNow.

• Create a proxy user to make requests from IdentityIQ to ServiceNow.