ServiceNow IGA Connector

The EmpowerID ServiceNow IGA connector lets you create, synchronize, and manage ServiceNow users, groups, roles, locations, companies, user roles, and group membership within EmpowerID. Imported user data can be managed and synchronized with data in any connected back-end user directories.

Supported Features and Attribute Mappings

Account Management
- Inventory ServiceNow users
- Create, Update and Delete users
- Enable, Disable and change passwords of users
Group Management
- Inventory groups
- Inventory group memberships
- Create, Update and Delete groups
- Add and Remove members to and from groups
Locations and Companies
- Inventory ServiceNow Locations and Companies (ExternalOrgZones in the EmpowerID Identity Warehouse)
Roles
- Inventory ServiceNow Roles (ExternalOrgRoles in the EmpowerID Identity Warehouse)
Account Attribute Flow
Users in ServiceNow are inventoried as accounts in EmpowerID. The below table shows the attribute mappings of ServiceNow user attributes to EmpowerID Person attributes.

ServiceNow Attribute	ServiceNow Table	EmpowerID Attribute	Description

ServiceNow Attribute	ServiceNow Table	EmpowerID Attribute	Description
name	User	Name	Name of a user
first_name	User	FirstName	First name of a user
last_name	User	LastName	Last name of a user
middle_name	User	MiddleName	Middle name of a user
user_name	User	LogonName	UPN that is an internet-style logon name for a user,
sys_id	User	SystemIdentifier	Unique system identifier for a given user
phone	User	Telephone	Phone number of a user
mobile_phone	User	MobileNumber	Mobile number of a user
home_phone	User	HomePhone	Home phone number of a user
gender	User	Gender	Gender of a user
email	User	Email	Email of a user
preferred_language	User	PreferredLanguage	Preferred written or spoken language for a user
active	User	Active	Indicates whether the user is active
street	User	StreetAddress	Street address for a user
city	User	City	City of the user
zip	User	ZipCode	Zip code of the user
state	User	State	State of the user
country	User	Country	Country of the user
title	User	JobTitle	Title of the user
manager	User	ManagerAccountID	Manager of the user
employee_number	User	EmployeeID	Employee number of the user
locked_out	User	LockedOut	Indicates whether the user is locked out
last_login	User	LastLogonTime	Last login time stamp for the user
password_needs_reset	User	MustChangePasswordAtNextLogon	Indicates whether the user needs to reset the password
name (department name)	Department	Department	Department name of the user
sys_id	Department	DepartmentNumber	Department ID of the user
name (company name)	Company	Company	Company name of the user
name (location name)	Location	Location	Location of the user

Group Attribute Flow
EmpowerID inventories Groups in ServiceNow as Groups in EmpowerID. The below table shows the attribute mappings of ServiceNow group attributes to EmpowerID group attributes.

ServiceNow Attribute	ServiceNow Table	EmpowerID Attribute	Description

ServiceNow Attribute	ServiceNow Table	EmpowerID Attribute	Description
name	Group	Name	Name of the group
email	Group	Email	Email of the group
description	Group	Description	Description of the group
active	Group	Active	Active status of the group
sys_id	Group	SystemIdentifier	Unique identifier of the group

Role Attribute Flow
EmpowerID inventories Roles in ServiceNow as ExternalOrgRoles in EmpowerID. The below table shows the attribute mappings of ServiceNow Role attributes to EmpowerID ExternalOrgRole attributes.

ServiceNow Attribute	ServiceNow Table	EmpowerID Attribute	Description

ServiceNow Attribute	ServiceNow Table	EmpowerID Attribute	Description
name	Role	Name	Name of the role
sys_id	Role	SystemIdentifier	Unique identifier of the role
description	Role	Description	Description of the role

Location/Company Attribute Flow
EmpowerID inventories Locations in ServiceNow, along with Companies located in those locations, as ExternalOrgZones in EmpowerID. The below table shows the attribute mappings of ServiceNow Location attributes to EmpowerID ExternalOrgZones attributes.

ServiceNow Attribute	ServiceNow Table	EmpowerID Attribute	Description

ServiceNow Attribute	ServiceNow Table	EmpowerID Attribute	Description
name (company_name)	Location (Company)	Name	Name of the location along with the name of the company in that location
parent	Location	ParentID	Parent of the location
L=sys_id;CO=sys_id	Location/Company	SystemIdentifier format: L="location_sys_id";CO="company_sys_id"	System identifiers of the location and company respectively

Group Membership

With the ServiceNow connector, you can have EmpowerID inventory Group memberships from the GroupAccount table. You can also add members to groups and remove members from groups in either EmpowerID or ServiceNow, and the changes will propagate to the other system on the next inventory.

User Role and Location Mapping

EmpowerID stores User Roles along with their corresponding Locations and Companies in the EmpowerID AccountExternalOrgRoleOrgZone table.

Tasks

The ServiceNow connector provides the functionality to create, update, and close ServiceNow Tasks. ServiceNow tasks can be of any type including ticket, incident, change request, and problem.

Inventory

The ServiceNow connector supports two types of inventory functionality.

Incremental Inventory — Keeps track of the inventory run's LastTimeStamp, and brings in only users and groups updated after that time.
Full Inventory — Inventories every user and group every time it runs.