Skip to content

ServiceNow Troubleshooting and Validation

This page describes how to validate and troubleshoot your ServiceNow integration after setup in SailPoint Entro. These steps confirm that the connection is active, data visibility is established, and API scopes are correctly configured.

Validation Steps

  1. Verify Connection Status

    1. In the SailPoint Entro Dashboard, go to Management > Accounts & Integrations.

    2. Locate your ServiceNow account.

    3. Confirm that the Status column displays Verified.

    4. Select the account entry to open details and view the Last Sync Time.

  2. Confirm Data Visibility

    1. Go to the Findings section in SailPoint Entro.

    2. Filter results by the ServiceNow integration nickname.

    3. Confirm that ticket, knowledge article, and configuration data are visible.

  3. Validate API Key Scope

    Use the ServiceNow API Explorer or a cURL command to confirm API access:

    curl -X GET 'https://<yourDomain>.service-now.com/api/now/table/incident' \
  -H 'x-sn-apikey: <YOUR_TOKEN>' \
  -H 'Accept: application/json'

    Expected outcome:

    • Response status: 200 OK

    • No "unauthorized" or "forbidden" errors

    • Returned JSON includes table data (limited by read-only role)

    If validation fails, confirm that:

    • The Integration User is active

    • The correct Auth Scope (entro-auth-scope) is assigned to both APIs

    • The Access Token has not expired or been revoked

Common Issues and Resolutions

  • Users/Integrations unable to sign in with Basic Auth

    1. Create a BasicAuth authentication profile:

      1. Go to All > System Web Services > API Access Policies > Inbound Authentication Profiles.

      2. Select New.

      3. Select Create standard http authentication profiles.

      4. Give the new profile a name (like BasicAuth) and make sure that Basic Auth is selected as the Type.

      5. Select Submit.

    2. Add the new profile to all the REST API Access Policies:

      1. Go to All > System Web Services > REST API Access Policies.

      2. Select the Table API policy.

      3. In the Inbound authentication profiles at the bottom, add the new BasicAuth auth profile to the list (in addition to the SailPoint Entro auth profile).

      4. Do the same for the Attachments API policy.

  • Connection status not verified

    Resolution: Recreate the API Access Token and reconnect the integration.

  • API response returns 401 or 403

    Resolution: Ensure the token scope and roles (itil, snc_read_only, personalize_dictionary, knowledge) are correctly assigned.

  • No findings or data appear in SailPoint Entro

    Resolution: Validate that the integration's API scopes are active and the Worker Group is online.

Resetting or Reconnecting the Integration

To re-establish connectivity:

  • In SailPoint Entro, open the existing ServiceNow account.

  • Regenerate the API Access Token in ServiceNow.

  • Update the token in the SailPoint Entro integration form.

  • The integration will revalidate automatically and restart scanning.

Support

If validation continues to fail after completing the above steps, review the Common Issues section or contact SailPoint Entro Support through your dedicated Slack or Teams channel, or at support@entro.security.