ServiceNow

ServiceNow plays two roles in a SailPoint deployment: it is a governed target (with its own roles and groups) and, very commonly, the fulfilment channel for manual provisioning, where SailPoint raises a ticket for a human to action. Integrating it covers both.

The ServiceNow integration is a REST/API-based connector. It uses the ServiceNow Table and Import Set APIs with a service account. As with every connector, the flow is the same: authenticate to ServiceNow, read accounts and entitlements during aggregation, and write changes during provisioning.

• 1. Configure the connection and credentials for ServiceNow.
• 2. Map the account schema, mapping ServiceNow users, roles and groups to SailPoint accounts and entitlements.
• 3. Set the correlation logic so ServiceNow accounts attach to the right identities (typically on a stable key such as employee ID or email).
• 4. Run account aggregation and confirm accounts and entitlements load.
• 5. Verify correlation, watching for uncorrelated/orphan accounts.

SailPoint can manage ServiceNow roles and group memberships directly, and, importantly, can open catalog or incident tickets in ServiceNow for access that must be fulfilled manually, then track those tickets to closure. This bridges automated governance with human fulfilment for systems without a write connector.

Govern ServiceNow roles and groups for direct access. For the ticketing integration, the value is process, every manual grant becomes a tracked, auditable work item rather than an email.

When ServiceNow aggregation or provisioning fails, work through the usual causes in order:

• Verify the ServiceNow service account and its roles for API access.
• Confirm the instance URL and that the required tables/APIs are reachable.
• Check any ACLs restricting the service account.
• Validate role/group schema mapping and ticket templates.

• Credential expiry (tokens/secrets) silently breaking the connector.
• Insufficient rights on the ServiceNow service account for the operations you need.
• Schema or correlation misconfiguration leaving accounts uncorrelated.