Service Account Configuration

(Previously referred as Client Credentials for Access request)

To configure the access request connection using client credentials, perform the following:

  1. Generate a personal access token on Identity Security Cloud.

    1. Sign in to Identity Security Cloud as an administrator.

    2. Follow the instructions to Generate a Personal Access Token. For additional information, refer to Best Practice: Using Personal Access Tokens.

    3. A client ID and client secret are generated for you.

    4. Save these offline so they are accessible.

    Note
    No additional configuration is required on the ServiceNow side to support client_credentials.

  2. Go to SailPoint Identity Security Cloud for Service Catalog > Setup.

  3. Enter the fully- qualified domain name of your Identity Security Cloud instance in Identity Security Cloud URL(Mandatory). For example, https://<company>.api.identitynow.com

  4. Enter the values of the Client ID and Client Secret that you generated in the above step in Identity Security Cloud Personal Access Token Client ID (To be Deprecated from future release, Use Application Registries) and Identity Security Cloud Personal Access Token Client Secret (To be Deprecated from future release, Use Application Registries).

    Note:

    This is the legacy method to establish the Service Account and will be soon deprecated. Keep this blank if you are using the new method as described in point 5.

  5. Enter the the value of the Auth name from the application registries in Application Registries OAuth Provider Name for Service Account(Provides enhanced performance, Mandatory from future release)

    To configure the parameter perform the following steps. (It is required for app version 5.3 and future releases.)

    1. In ServiceNow, go to System OAuth > Application Registry.

    2. Select New.Choose Connect to a third-party OAuth provider.

    3. Enter the Client ID and Client Secret you created in step 1.

    4. Set Grant Type to Client Credentials, add the Token URL, and select Save.

    Note:

    This is suggested new method to be mandated from upcoming release. Keep it blank if still using legacy method as described in point 4

  6. Select client_credentials if Service Account is the method for connection for every user or Select authorization_code if individual user account will be used for connection.