SaaS Security Administrator's Guide
    : Onboard a ServiceNow App to SSPM
    Focus
    Download PDF
    Focus
    1. Home
    2. SaaS Security
    3. SaaS Security Administrator's Guide
    4. SaaS Security Posture Management
    5. Onboard SaaS Apps Supported by SSPM
    6. Onboard a ServiceNow App to SSPM
    Download PDF

    SaaS Security Administrator's Guide

    Onboard a ServiceNow App to SSPM

    Table of Contents

    Onboard a ServiceNow App to SSPM

    Connect a ServiceNow instance to SSPM to detect posture risks.
    For SSPM to detect posture risks in your ServiceNow instance, you must onboard your ServiceNow instance to SSPM. Through the onboarding process, SSPM connects to a ServiceNow API and, through the API, scans your ServiceNow instance for misconfigured settings. If there are misconfigured settings, SSPM suggests a remediation action based on best practices.
    SSPM gets access to your ServiceNow instance through OAuth 2.0 authorization. To enable OAuth 2.0 authorization, you first register an OAuth 2.0 integration application in ServiceNow before onboarding your ServiceNow instance in SSPM. During the onboarding process, you are prompted to log in to ServiceNow and to grant SSPM the access it requires.
    You can also use the OAuth 2.0 application to enable SSPM to create tickets in ServiceNow. To enable ServiceNow ticketing, you link SSPM to a ServiceNow instance from the Ticketing Settings page. To enable ticketing, SSPM requires the same information that it requires for onboarding ServiceNow. However, onboarding ServiceNow for configuration scans and linking to ServiceNow for ticketing are two separate procedures. When creating your OAuth 2.0 application in ServiceNow, be aware that SSPM uses different redirect URLs depending on whether you are onboarding ServiceNow for configuration scans or linking to ServiceNow for ticketing. Your OAuth 2.0 integration application can specify both of these redirect URLs.
    To onboard your ServiceNow instance, you complete the following actions:

    Collect Information for Accessing Your ServiceNow Instance

    To access your ServiceNow instance, SSPM requires the following application credentials. You will create the OAuth 2.0 integration application and provide its credentials to SSPM during the onboarding process.
    Item
    Description
    Client ID
    SSPM will access a ServiceNow API through an OAuth 2.0 application that you create. ServiceNow generates the Client ID to uniquely identify the application.
    Client Secret
    SSPM will access the ServiceNow API through an OAuth 2.0 application that you create. ServiceNow generates the Client Secret, which SSPM uses to authenticate to the application.
    Instance URL
    The unique URL for your ServiceNow instance.
    As you complete the following steps, make note of the values of the items described in the preceding table. You will need to enter these values during onboarding to enable SSPM to access your ServiceNow instance.
    1. From SSPM, get the redirect URLs that you will need when you register your OAuth 2.0 application in ServiceNow. For onboarding, you must specify the redirect URL for onboarding configuration scans. If you also want to enable ServiceNow ticketing from SSPM, you must also specify the redirect URL for ticketing.
      To get the redirect URL for onboarding configuration scans, you will begin the onboarding procedure in SSPM, but you will not complete the procedure.
      1. From the Add Application page in SSPM (
        Posture Security
        Applications
        Add Application
        ), click the ServiceNow tile.
      2. Under posture security instances,
        Add Instance
         or, if there is already an instance configured,
        Add New
         instance.
        The Configuration page for onboarding a ServiceNow instance is displayed. The Redirect URL field displays the redirect URL value.
      3. Copy the redirect URL and paste it into a text file.
        Do not continue to the next step unless you have copied the redirect URL. You will need to specify this URL later when you are configuring your OAuth 2.0 integration application.
      If you will also want to link SSPM to the ServiceNow instance for ticketing, get the redirect URL for ticketing. To get this redirect URL, you will begin the procedure for linking SSPM to ServiceNow for ticketing, but you will not complete the procedure.
      1. Select
        SaaS Security
        Settings
        Workflow
        Ticketing Settings
        .
      2. Add Link
         for ServiceNow.
        The login page for linking to a ServiceNow instance is displayed. The Redirect URL field displays the redirect URL value. Copy the redirect URL and paste it into a text file.
        Do not continue to the next step unless you have copied the redirect URL. You will need to specify this URL later when you are configuring your OAuth 2.0 integration application.
    2. Create your OAuth 2.0 application in ServiceNow.
      1. Log in to ServiceNow as an administrator.
      2. Navigate to the Application Registries page (
        System OAuth
        Application Registry
        ).
      3. From the Application Registries page, create a
        New
         application.
      4. ServiceNow prompts you to select the type of OAuth application that you want to create. Specify that you want to
        Create an OAuth API endpoint for external clients
        .
        ServiceNow displays a dialog for configuring your OAuth 2.0 application.
      5. Fill in your OAuth 2.0 application details using the fields that ServiceNow provides. Specify the redirect URL for onboarding ServiceNow, and, optionally, the redirect URL for linking to ServiceNow for ticketing. If you are adding both redirect URLs, separate the two URLs with a comma.
      6. Submit
        .
        ServiceNow registers your new OAuth 2.0 application and displays the Application Registries page. The Application Registries page now lists your OAuth 2.0 application.
      7. Open your OAuth 2.0 application and copy the Client ID and Client Secret into a text file.
        Do not continue to the next step unless you have copied the Client ID and Client Secret. You must provide this information to SSPM during the onboarding process.

    Connect SSPM to Your ServiceNow Instance

    By adding a ServiceNow app in SSPM, you enable SSPM to connect to your ServiceNow instance for scanning.
    1. From the Add Application page (
      Posture Security
      Applications
      Add Application
      ), click the ServiceNow tile.
    2. Under posture security instances,
      Add Instance
       or, if there is already an instance configured,
      Add New
       instance.
    3. On the Configuration page, enter your Instance URL and the application credentials (Client ID and Client Secret) and
      Connect
      .
      SSPM redirects you to the ServiceNow log in page.
    4. Log in using a ServiceNow administrator account.
      ServiceNow displays a consent form that details the access permissions that SSPM requires.
    5. Review the consent form and allow the requested permissions.
    6. If you also want to create ServiceNow tickets from SSPM, link SSPM to the ServiceNow instance. You link SSPM to ServiceNow from the Ticketing Settings page (
      SaaS Security
      Settings
      Workflow
      Ticketing Settings
      ).

    Recommended For You

    © 2024 Palo Alto Networks, Inc. All rights reserved.