Set Up Integration for Root Tenants

1. Create an Integration User

   To ensure secure access and proper data exchange, you must create a dedicated integration user in your ServiceNow instance. This user serves as the trusted account that the ServiceNow Prisma SASE application uses to authenticate and communicate with the Prisma SASE platform.

   To add an integration user, perform the following:

   1. Log in to the ServiceNow instance as the root tenant user.
   2. Create a new integration user.
      1. Select OrganizationUsersNew .
      2. Specify the Name, User ID, and Email.
      3. Search and select the Company. The company name matches the domain or tenant name. Each company represents a tenant organization and ensures the segregation of data and processes.
      4. Submit to create a new user.
   3. Assign roles.
      1. Search for the newly added user by name.
      2. Select the user.
      3. Select RolesEdit.
      4. Search and add the following roles:
         1. x_paan_prisma_sase.isr_incident_user
         2. x_paan_prisma_sase.app_admin
      5. Save the user.
2. Configure Prisma SASE Connections

   Configure a new Prisma SASE credential and connection specific to the root tenant.

   1. Select Prisma SASE APP for ServiceNowApp SetupBasic Settings.
   2. Select Configure Prisma SASE Connections.
   3. Create Credentials.
      Credentials are details of the root tenant service account created in the Strata Cloud Manager. This credential will be used by the ServiceNow app to connect securely with Prisma SASE.
      1. Select Create Credentials ConfigureNew.
      2. Specify the TSG ID, Client ID, and Client Secret.
      3. Submit the configuration.
      4. Mark as Complete.
   4. Create Connections.
      1. Select Create Connection Alias ConfigureNewHTTP(s) Connection.
      2. Specify the following:
         • Name-Connection name.
         • Credential and Connection alias - Search and select the credential and connection alias that you created in the previous steps.
         • Connection URL - Prisma SASE API gateway URL.
      3. Submit the configuration.
      4. Mark as Complete.
3. Configure ServiceNow Credentials

   Set up the integration user as a ServiceNow credential to enable Prisma SASE to establish a secure connection with your ServiceNow instance.

   1. Select Configure ServiceNow Credentials ConfigureNew.
   2. Specify the Name.
   3. Specify the integration username and password created in Step 1 in the ServiceNow Instance Username and ServiceNow Instance Password fields.
   4. Submit the configuration.
   5. Mark as Complete.
4. Next Step - Continue with Creation of Notification Profile or Log Forwarding Profile