ServiceNow IGA Connector
The EmpowerID ServiceNow IGA connector lets you create, synchronize, and manage ServiceNow users, groups, roles, locations, companies, user roles, and group membership within EmpowerID. Imported user data can be managed and synchronized with data in any connected back-end user directories.
Supported Features and Attribute Mappings
Account Management
Inventory ServiceNow users
Create, Update and Delete users
Enable, Disable and change passwords of users
Group Management
Inventory groups
Inventory group memberships
Create, Update and Delete groups
Add and Remove members to and from groups
Locations and Companies
Inventory ServiceNow Locations and Companies (ExternalOrgZones in the EmpowerID Identity Warehouse)
Roles
Inventory ServiceNow Roles (ExternalOrgRoles in the EmpowerID Identity Warehouse)
Account Attribute Flow
Users in ServiceNow are inventoried as accounts in EmpowerID. The below table shows the attribute mappings of ServiceNow user attributes to EmpowerID Person attributes.
ServiceNow Attribute | ServiceNow Table | EmpowerID Attribute | Description |
|---|---|---|---|
name | User | Name | Name of a user |
first_name | User | FirstName | First name of a user |
last_name | User | LastName | Last name of a user |
middle_name | User | MiddleName | Middle name of a user |
user_name | User | LogonName | UPN that is an internet-style logon name for a user, |
sys_id | User | SystemIdentifier | Unique system identifier for a given user |
phone | User | Telephone | Phone number of a user |
mobile_phone | User | MobileNumber | Mobile number of a user |
home_phone | User | HomePhone | Home phone number of a user |
gender | User | Gender | Gender of a user |
User | Email of a user | ||
preferred_language | User | PreferredLanguage | Preferred written or spoken language for a user |
active | User | Active | Indicates whether the user is active |
street | User | StreetAddress | Street address for a user |
city | User | City | City of the user |
zip | User | ZipCode | Zip code of the user |
state | User | State | State of the user |
country | User | Country | Country of the user |
title | User | JobTitle | Title of the user |
manager | User | ManagerAccountID | Manager of the user |
employee_number | User | EmployeeID | Employee number of the user |
locked_out | User | LockedOut | Indicates whether the user is locked out |
last_login | User | LastLogonTime | Last login time stamp for the user |
password_needs_reset | User | MustChangePasswordAtNextLogon | Indicates whether the user needs to reset the password |
name (department name) | Department | Department | Department name of the user |
sys_id | Department | DepartmentNumber | Department ID of the user |
name (company name) | Company | Company | Company name of the user |
name (location name) | Location | Location | Location of the user |
Group Attribute Flow
EmpowerID inventories Groups in ServiceNow as Groups in EmpowerID. The below table shows the attribute mappings of ServiceNow group attributes to EmpowerID group attributes.
ServiceNow Attribute | ServiceNow Table | EmpowerID Attribute | Description |
|---|---|---|---|
name | Group | Name | Name of the group |
Group | Email of the group | ||
description | Group | Description | Description of the group |
active | Group | Active | Active status of the group |
sys_id | Group | SystemIdentifier | Unique identifier of the group |
Role Attribute Flow
EmpowerID inventories Roles in ServiceNow as ExternalOrgRoles in EmpowerID. The below table shows the attribute mappings of ServiceNow Role attributes to EmpowerID ExternalOrgRole attributes.
ServiceNow Attribute | ServiceNow Table | EmpowerID Attribute | Description |
|---|---|---|---|
name | Role | Name | Name of the role |
sys_id | Role | SystemIdentifier | Unique identifier of the role |
description | Role | Description | Description of the role |
Location/Company Attribute Flow
EmpowerID inventories Locations in ServiceNow, along with Companies located in those locations, as ExternalOrgZones in EmpowerID. The below table shows the attribute mappings of ServiceNow Location attributes to EmpowerID ExternalOrgZones attributes.
ServiceNow Attribute | ServiceNow Table | EmpowerID Attribute | Description |
|---|---|---|---|
name (company_name) | Location (Company) | Name | Name of the location along with the name of the company in that location |
parent | Location | ParentID | Parent of the location |
L=sys_id;CO=sys_id | Location/Company | SystemIdentifier format: | System identifiers of the location and company respectively |
Group Membership
With the ServiceNow connector, you can have EmpowerID inventory Group memberships from the GroupAccount table. You can also add members to groups and remove members from groups in either EmpowerID or ServiceNow, and the changes will propagate to the other system on the next inventory.
User Role and Location Mapping
EmpowerID stores User Roles along with their corresponding Locations and Companies in the EmpowerID AccountExternalOrgRoleOrgZone table.
Tasks
The ServiceNow connector provides the functionality to create, update, and close ServiceNow Tasks. ServiceNow tasks can be of any type including ticket, incident, change request, and problem.
Inventory
The ServiceNow connector supports two types of inventory functionality.
Incremental Inventory — Keeps track of the inventory run's LastTimeStamp, and brings in only users and groups updated after that time.
Full Inventory — Inventories every user and group every time it runs.