Connect ServiceNow to Microsoft Cloud App Security

Applies to: Microsoft Cloud App Security

Important

Threat protection product names from Microsoft are changing. Read more about this and other updates here. We'll be updating names in products and in the docs in the near future.

This article provides instructions for connecting Microsoft Cloud App Security to your existing ServiceNow account using the app connector API. This connection gives you visibility into and control over ServiceNow use. For information about how Cloud App Security protects ServiceNow, see Protect ServiceNow.

Note

We recommend deploying ServiceNow using OAuth app tokens, available for Fuji and later releases (see the relevant ServiceNow documentation. For earlier releases, a legacy connection mode is available based on user/password. The username/password provided are only used for API token generation and are not saved after the initial connection process.

Note

Cloud App Security supports the following ServiceNow versions: Eureka, Fiji, Geneva, Helsinki, Istanbul, Jakarta, Kingston, London, Madrid, and New York. In order to connect ServiceNow with Cloud App Security, you must have the role Admin and make sure the ServiceNow instance supports API access. For more information, see the ServiceNow Product Documentation.

How to connect ServiceNow to Cloud App Security using OAuth

  1. Sign in with an Admin account to your ServiceNow account.

    Note

    The username/password provided are only used for API token generation and are not saved after the initial connection process.

  2. In the Filter navigator search bar, type OAuth and select Application Registry.

  3. In the Application Registries menu bar, click New to create a new OAuth profile.

    ServiceNow new OAuth profile

  4. Under What kind of OAuth application?, click Create an OAuth API endpoint for external clients.

    ServiceNow OAuth type

  5. Under Application Registries New record fill in the following fields:

    • Name field, name the new OAuth profile, for example, CloudAppSecurity.

    • The Client ID is generated automatically. Copy this ID, you need to paste it into Cloud App Security to complete connection.

    • In the Client Secret field, enter a string. If left empty, a random Secret is generated automatically. Copy and save it for later.

    • Increase the Access Token Lifespan to at least 3,600.

    • Click Submit.

    ServiceNow profile IDs

  6. In the Cloud App Security portal, click Investigate and then Connected apps.

  7. In the App connectors page, click the plus button and then ServiceNow.

    connect ServiceNow

  8. In the pop-up, add your ServiceNow user ID, password, instance URL, Client ID, and Client secret in the appropriate boxes. To find your ServiceNow User ID, in the ServiceNow portal, go to Users and then locate your name in the table.

    ServiceNow user ID

  9. Click Connect.

    ServiceNow connect to CAS

  10. Make sure the connection succeeded by clicking Test now.

    Testing may take a couple of minutes. After receiving a success notice, click Close.

After connecting ServiceNow, you'll receive events for 7 days prior to connection.

Legacy ServiceNow connection

To connect ServiceNow with Cloud App Security, you must have admin-level permissions and make sure the ServiceNow instance supports API access.

  1. Sign in with an Admin account to your ServiceNow account.

  2. Create a new service account for Cloud App Security and attach the Admin role to the newly created account.

  3. Make sure the REST API plug-in is turned on.

    ServiceNow account

  4. In the Cloud App Security portal, click Investigate and then Sanctioned apps.

  5. In the ServiceNow row, click Connect in the App Connector status column, or click the Connect an app button and then ServiceNow.

    connect ServiceNow

  6. In the ServiceNow settings page, on the API tab, add your ServiceNow user ID, password, and instance URL in the appropriate boxes.

  7. Click Connect.

    ServiceNow update password

  8. Make sure the connection succeeded by clicking Test API.

    Testing may take a couple of minutes. After receiving a success notice, click Close.

After connecting ServiceNow, you will receive events for 7 days prior to connection.

If you have any problems connecting the app, see Troubleshooting App Connectors.

Next steps

If you run into any problems, we're here to help. To get assistance or support for your product issue, please open a support ticket.