Deploying the ServiceNow Adapter

To deploy the ServiceNow Adapter, you must perform the following steps:

1. Create ServiceNow credentials with the appropriate permissions

As we described earlier, Axonius supports two authentication methods for connecting to ServiceNow:

Username/Password
  1. Navigate to User Administration → Users and click New.

    • User ID: axonius_integration
    • Password: Set a strong password.

  2. Save the new user, then search for it in the Users list.

    • Click the user record to open it.
    • Click Edit in the Roles section to modify the user’s assigned roles.

  3. Assign the required roles for Cyber & Software Assets fetching.

  4. Click Save and then Update to apply the changes to the user’s settings.

OAuth ID/Secret
  1. Navigate to User Administration → Users and click New.

    • User ID: axonius_integration
    • Password: Set a strong password.
    • Save the user.
  2. Navigate to User Administration → Roles and click New.

    • Name: x_axonius_read
    • Description: Read-only access for Axonius integration
    • Save the role.
  3. Navigate to System Security → Access Control (ACL) and for each table below, create a record ACL with Operation: read:

    sysevent_script_action
    sys_email_filter
    sys_dictionary
    sys_properties
    password_policy
    syslog_transaction
    v_plugins
    sys_user
    • Set Requires role to x_axonius_read.
    • Set the script to answer = true;.
    • Save each ACL.
  4. Assign the role to the service account:

    • Open axonius_integration user.
    • Under Roles, add x_axonius_read.
    • Assign the required roles for Assets fetching and Enforcement Actions.
    • Save.
  5. Configure OAuth:

    • Navigate to System OAuth → Application Registry → New → Create an OAuth API endpoint for external clients.
      • Name: Axonius
      • Enable Client Credentials grant type.
      • Save and copy Client ID and Client Secret.
    • Navigate to System OAuth → Entity Profiles → New:
      • Application Registry: Axonius
      • User: axonius_integration
      • Save.

2. Set up the ServiceNow adapter in Axonius


Create the Adapter connection in Axonius. Based on the authentication method (Username/Password or OAuth ID/Secret), fill out the specific fields, and configure optional settings.

Add a New Connection

  • Navigate to the Adapters page → search for ServiceNow → click on the adapter tile.

  • On the top right side, click on Add Connection.



  • You should see the Add Connection drawer open up.

Required Fields

  • ServiceNow Domain - The hostname or IP address of the ServiceNow server. This field format is https://[instance].service-now.com.

  • Authentication Method

  • User Name and Password - The credentials for the user account that you have created in the previous step, or that has the Required Permissions to fetch assets.
  • Connection Label - Friendly name for your new adapter connection.

Optional Fields

Expand/Collapse
  • Fetch devices updated in ServiceNow in the last X hours (0: All) (Cyber Assets only, default: 0) - Enter an amount of hours to fetch only devices that have been updated in ServiceNow in the last specified number of hours.

  • Fetch users updated in ServiceNow in the last X hours (0: All) (default: 0) - Enter an amount of hours to fetch only users that have been updated in ServiceNow in the last specified number of hours.

  • Fetch users created in ServiceNow in the last X hours (0: All) (default: 0) - Enter an amount of hours to fetch only users that have been created in ServiceNow in the last specified number of hours.

  • OAuth Custom Endpoint Path - Specify a custom endpoint path to be used instead of the default oauth_token.do.

  • Enable sending OAuth requests as JSON - Enable to to send the request in JSON format instead of the standard www-form-urlencoded format.

  • Apigee URL - The URL of the domain that the get request is sent to for acquiring APIgee token.

  • Resource Apigee - The resources you want the APIgee to access.

  • Verify SSL - Select to verify the SSL certificate offered by the value supplied in ServiceNow Domain. For more details, see SSL Trust & CA Settings.

  • HTTPS Proxy - A proxy to use when connecting to the value supplied in ServiceNow Domain.

  • Advanced configuration file - Upload an advanced configuration JSON file.

  • Enable Client Side Certificate - Select to enable Axonius to send requests using the certificates uploaded to allow Mutual TLS configuration for this adapter. When you select this option, 2 more fields are displayed:

  • Client Certificate File (.pem) - Adds a client side certificate to the connection.

  • Client Private Key File (.pem) - Adds a private key to the connection (if the API/proxy requires identification).

    • Click Upload File next to Client Private Key File to upload a client private key file in PEM format
    • Click Upload File next to Client Certificate File to upload a public key file in PEM format

3. (optional) Configure Advanced Settings

Please refer to the ServiceNow Advanced Settings.