ServiceNow

Learn how to create a ServiceNow connector in BeyondTrust Identity Security Insights.

Prerequisites

Before you configure the ServiceNow connector, ensure the following requirements are met.

ServiceNow access

  • You have administrator access to your ServiceNow instance.
  • You can elevate your role to security_admin (required for table access configuration).
  • The Client Credentials Grant Type is activated for your environment. If not, see Step 3: Enable Client Credentials Grant Type below.

Identity Security Insights access

  • You have administrator access to Identity Security Insights.
⚠️

Important

Third-party documentation is subject to change. Updates might not be reflected in BeyondTrust documentation. For the most up-to-date information, refer to ServiceNow documentation.

Configuration paths

Before you begin, choose your configuration options. Your choices determine which steps apply to you.

Roles and permissions setup

MethodWhen to use
Option A: Use Update SetYou want to automate role and ACL creation by importing a pre-built update set
Option B: Manual ConfigurationYou prefer to create the role and ACL rules manually, or your instance restricts update set imports

OAuth endpoint creation

MethodWhen to use
Option A: New Inbound IntegrationYour ServiceNow instance supports the New Inbound Integration Experience (newer instances)
Option B: OAuth API Endpoint for External ClientsYou prefer the legacy approach or your instance does not support the New Inbound Integration Experience

Step 1: Create the connector in Insights

  1. From Insights Home, select the Pathfinder navigation menu > Connectors.
  2. Click Total configured.
  3. Select Create Connector > ServiceNow.
ℹ️

Keep this panel open. You will return to it in the Final step.

Step 2: Configure roles and permissions

  1. In the Insights connector creation panel, download the update set.
  2. Follow ServiceNow documentation: Save an update set as a local XML file to import and apply the update set in your ServiceNow instance.
ℹ️

The update set automatically creates the bt_read_only role, assigns the required sub-roles, and configures ACL rules for the required tables.

Step 3: Enable client credentials grant type (if applicable)

Skip this step if the system property already exists and is set to true.

  1. In ServiceNow, navigate to System Properties > All Properties.
  2. Search for glide.oauth.inbound.client.credential.grant_type.enabled.
  3. If it does not exist, create a new system property:
    • Name: glide.oauth.inbound.client.credential.grant_type.enabled
    • Type: true | false
    • Value: true
  4. Save the property.

Step 4: Create the OAuth application user

  1. Navigate to System Security > Users and Groups > Users.
  2. Create a service account with the following details:
    • User ID: BT-SP-Connector
    • First Name: BT-SP-Connector
  3. Assign the bt_read_only role to the user.

Step 5: Configure table access

⚠️

Important

You must elevate your role to security_admin to perform these actions.

  1. Navigate to System Definition > Tables.
  2. Search for the sys_package table.
  3. Click into the table and select the Application Access tab.
  4. Ensure Allow access to this table via web services is checked.
  5. Ensure Can Read is checked.
  6. Click Save.
  7. Repeat steps 2–6 for the password_policy table.

Step 6: Create an OAuth API endpoint

  1. Navigate to System OAuth > Application Registry.
  2. Select New > New Inbound Integration Experience > New integration > OAuth - Client Credentials grant.
  3. Fill in the following:
    • Name: BT-SP-Connector
    • OAuth application user: BT-SP-Connector
  4. Copy the Client ID and Client Secret.
  5. Click Save.

Final step: Complete the connector in Insights

  1. In Identity Security Insights, enter the following in the connector creation panel:
    • Domain: Your ServiceNow instance URL (e.g., https://your-instance.service-now.com)
    • Client ID: Paste the Client ID from Step 6.
    • Client Secret: Paste the Client Secret from Step 6.
  2. Click Create Connector.

Navigate to Pathfinder navigation menu > Connectors > Total Configured to confirm the connector was successfully created and review connector settings.


©2003-2026 BeyondTrust Corporation. All Rights Reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.