Configuring ServiceNow for Integration

Select either Basic or OAuth from the drop down list.

Enter a valid Admin user that can login to the IdentityIQ API.

The associated password for the Admin user to access the IdentityIQ API.

See Authenticating with OAuth2 for information on how to generate these values.

The name of the MID server on your local network that is used to make the REST requests.

Specify whether Lifecycle Manager (LCM) is enabled in your IdentityIQ instance.

The SailPoint identity attribute (e.g. name) and account attribute (e.g., user_name) you want to correlate with ServiceNow accounts

By default, the integration relies on ServiceNow Manager approvals before it can create access requests in IdentityIQ. To use an IdentityIQapproval workflow instead, select Yes from the Disable ServiceNow Manager Approval? drop-down. In this case, approvals will follow the process that’s defined for your IdentityIQ org.

Specify the name of the SailPoint IdentityIQ Business Process that access requests initiated within the ServiceNow Portal will follow. In IdentityIQ, select Lifecycle Manager from the gear icon, click the Business Process tab and use the Request Access drop down list to view the available business processes. Be sure that the business process name you provide is suitable for LCM Provisioning.

If you’re unsure, check with your IdentityIQ Administrator to ensure you provide the correct value here.

Specify the name(s) of the IdentityIQ role types you want to make requestable to users. The role types you specify here will be available to users when they request access and included in search results.For more information, see Using the ServiceNow Portal Integration for IdentityIQ, select Global Settings from the gear icon, then select Role Configuration. Under Role Types, click the name of a role type listed to view its details. Role types are case sensitive, so be sure to specify the same value that’s in the Type Name field, not the Display Name. To make multiple role types requestable, use a comma to separate the values (e.g., business,it,custom).

 The fully qualified domain name of your IdentityIQ instance (e.g., https://<company>.com:8080/identityiq)

• A valid Admin user that can login to the IdentityIQ API
• The associated password for that Admin user to access the IdentityIQ API
• The name to the MID Server to use to make REST requests to IdentityIQ
• Verify that Lifecycle Manager (LCM) is enabled in IdentityIQ and check Yes (required)
• The SailPoint identity attribute you want to correlate with ServiceNow accounts (e.g., name).
• The ServiceNow Account attribute you want to correlate with the SailPoint identity cube (e.g., user_name)

Specify where the user is redirected after successfully creating a new ServiceNow Access request:

• Default: Leave the field empty to redirect the user to the default Service Portal page

• Specify a relative path that starts with / to redirect the user to that page. Example, to send a user to the Manage Access page:

  /sp?id=manage_access

• Enter a URL with an absolute path to a page or site. For example:

  https://www.sailpoint.com/

Select Yes to make comments in the Access Request mandatory.

Select Yes to restrict creating a Revoke Access request to only users with role x_sap_integration.sapadmin. If No is selected, users with any role can create Revoke Access requests.

Provide a user-friendly heading that is displayed in the left sidebar.

List the fields you want available on the users' search page. Enter field names from the sys_user table separated by a comma.

List the fields that will be used for the users' search. Enter fields names from the sys_user table separated by a comma.

Select this check box to merge all approved ServiceNow RITM, and create only one identity request in IdentityIQ with multiple requests for the same user.

Add workflows to this field to execute additional workflows inside of the default workflow for ServiceNow RITM. These workflows execute before creating an access request in IdentityIQ.