SaaS Security Administrator's Guide
    : Onboard a ServiceNow App to SSPM
    Focus
    Download PDF
    Focus
    1. Home
    2. SaaS Security
    3. SaaS Security Administrator's Guide
    4. SaaS Security Posture Management
    5. Onboard SaaS Apps Supported by SSPM
    6. Onboard a ServiceNow App to SSPM
    Download PDF

    SaaS Security Administrator's Guide

    Onboard a ServiceNow App to SSPM

    Table of Contents

    Onboard a ServiceNow App to SSPM

    Connect a ServiceNow instance to SSPM to detect posture risks.
    For SSPM to detect posture risks in your ServiceNow instance, you must onboard your ServiceNow instance to SSPM. Through the onboarding process, SSPM connects to a ServiceNow API and, through the API, scans your ServiceNow instance for misconfigured settings. If there are misconfigured settings, SSPM suggests a remediation action based on best practices.
    SSPM gets access to your ServiceNow instance through OAuth 2.0 authorization. To enable OAuth 2.0 authorization, you first register an OAuth 2.0 integration application in ServiceNow before onboarding your ServiceNow instance in SSPM. During the onboarding process, you are prompted to log in to ServiceNow and to grant SSPM the access it requires.
    To onboard your ServiceNow instance, you complete the following actions:

    Collect Information for Accessing Your ServiceNow Instance

    To access your ServiceNow instance, SSPM requires the following application credentials. You will create the OAuth 2.0 integration application and provide its credentials to SSPM during the onboarding process.
    Item
    Description
    Client ID
    SSPM will access a ServiceNow API through an OAuth 2.0 application that you create. ServiceNow generates the Client ID to uniquely identify the application.
    Client Secret
    SSPM will access the ServiceNow API through an OAuth 2.0 application that you create. ServiceNow generates the Client Secret, which SSPM uses to authenticate to the application.
    Instance URL
    The unique URL for your ServiceNow instance.
    As you complete the following steps, make note of the values of the items described in the preceding table. You will need to enter these values during onboarding to enable SSPM to access your ServiceNow instance.
    1. From SSPM, get the redirect URL that will need when you register your OAuth 2.0 application in ServiceNow. To get this information, you will begin the onboarding process in SSPM, but you will not complete the process.
      1. From the Add Application page in SSPM (
        Posture Security
        Applications
        Add Application
        ), click the ServiceNow tile.
      2. Under posture security instances,
        Add Instance
         or, if there is already an instance configured,
        Add New
         instance.
        The Configuration page for onboarding a ServiceNow instance is displayed. The Redirect URL field displays the redirect URL value.
      3. Copy the Redirect URL and paste it into a text file.
        Do not continue to the next step unless you have copied the redirect URL. You will need to specify this URL later when you are configuring your OAuth 2.0 integration application.
    2. Create your OAuth 2.0 application in ServiceNow.
      1. Log in to ServiceNow as an administrator.
      2. Navigate to the Application Registries page (
        System OAuth
        Application Registry
        ).
      3. From the Application Registries page, create a
        New
         application.
      4. ServiceNow prompts you to select the type of OAuth application that you want to create. Specify that you want to
        Create an OAuth API endpoint for external clients
        .
        ServiceNow displays a dialog for configuring your OAuth 2.0 application.
      5. Fill in your OAuth 2.0 application details using the fields that ServiceNow provides. Make sure that you specify the redirect URI that you obtained from SSPM.
      6. Submit
        .
        ServiceNow registers your new OAuth 2.0 application and displays the Application Registries page. The Applicataion Registries page now lists your OAuth 2.0 application.
      7. Open your OAuth 2.0 application and copy the Client ID and Client Secret into a text file.
        Do not continue to the next step unless you have copied the Client ID and Client Secret. You must provide this information to SSPM during the onboarding process.

    Connect SSPM to Your ServiceNow Instance

    By adding a ServiceNow app in SSPM, you enable SSPM to connect to your ServiceNow instance.
    1. From the Add Application page (
      Posture Security
      Applications
      Add Application
      ), click the ServiceNow tile.
    2. Under posture security instances,
      Add Instance
       or, if there is already an instance configured,
      Add New
       instance.
    3. On the Configuration page, enter your Instance URL and the application credentials (Client ID and Client Secret) and
      Connect
      .
      SSPM redirects you to the ServiceNow log in page.
    4. Log in using a ServiceNow administrator account.
      ServiceNow displays a consent form that details the access permissions that SSPM requires.
    5. Review the consent form and allow the requested permissions.

    Recommended For You

    © 2024 Palo Alto Networks, Inc. All rights reserved.