ServiceNow
Learn how to create a ServiceNow connector in BeyondTrust Identity Security Insights.
Prerequisites
Before you configure the ServiceNow connector, ensure the following requirements are met.
ServiceNow access
- You have administrator access to your ServiceNow instance.
- You can elevate your role to
security_admin(required for table access configuration). - The Client Credentials Grant Type is activated for your environment. If not, see Step 3: Enable Client Credentials Grant Type below.
Identity Security Insights access
- You have administrator access to Identity Security Insights.
ImportantThird-party documentation is subject to change. Updates might not be reflected in BeyondTrust documentation. For the most up-to-date information, refer to ServiceNow documentation.
Configuration paths
Before you begin, choose your configuration options. Your choices determine which steps apply to you.
Roles and permissions setup
| Method | When to use |
|---|---|
| Option A: Use Update Set | You want to automate role and ACL creation by importing a pre-built update set |
| Option B: Manual Configuration | You prefer to create the role and ACL rules manually, or your instance restricts update set imports |
OAuth endpoint creation
| Method | When to use |
|---|---|
| Option A: New Inbound Integration | Your ServiceNow instance supports the New Inbound Integration Experience (newer instances) |
| Option B: OAuth API Endpoint for External Clients | You prefer the legacy approach or your instance does not support the New Inbound Integration Experience |
Step 1: Create the connector in Insights
- From Insights Home, select the Pathfinder navigation menu > Connectors.
- Click Total configured.
- Select Create Connector > ServiceNow.
Keep this panel open. You will return to it in the Final step.
Step 2: Configure roles and permissions
- In the Insights connector creation panel, download the update set.
- Follow ServiceNow documentation: Save an update set as a local XML file to import and apply the update set in your ServiceNow instance.
The update set automatically creates the
bt_read_onlyrole, assigns the required sub-roles, and configures ACL rules for the required tables.
Step 3: Enable client credentials grant type (if applicable)
Skip this step if the system property already exists and is set to true.
- In ServiceNow, navigate to System Properties > All Properties.
- Search for
glide.oauth.inbound.client.credential.grant_type.enabled. - If it does not exist, create a new system property:
- Name:
glide.oauth.inbound.client.credential.grant_type.enabled - Type: true | false
- Value: true
- Name:
- Save the property.
Step 4: Create the OAuth application user
- Navigate to System Security > Users and Groups > Users.
- Create a service account with the following details:
- User ID: BT-SP-Connector
- First Name: BT-SP-Connector
- Assign the
bt_read_onlyrole to the user.
Step 5: Configure table access
ImportantYou must elevate your role to
security_adminto perform these actions.
- Navigate to System Definition > Tables.
- Search for the
sys_packagetable. - Click into the table and select the Application Access tab.
- Ensure Allow access to this table via web services is checked.
- Ensure Can Read is checked.
- Click Save.
- Repeat steps 2–6 for the
password_policytable.
Step 6: Create an OAuth API endpoint
- Navigate to System OAuth > Application Registry.
- Select New > New Inbound Integration Experience > New integration > OAuth - Client Credentials grant.
- Fill in the following:
- Name: BT-SP-Connector
- OAuth application user: BT-SP-Connector
- Copy the Client ID and Client Secret.
- Click Save.
Final step: Complete the connector in Insights
- In Identity Security Insights, enter the following in the connector creation panel:
- Click Create Connector.
Navigate to
> Connectors > Total Configured to confirm the connector was successfully created and review connector settings.
Updated 27 days ago