Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Integrate the ServiceNow API

  1. Last updated
  2. Save as PDF

Use the following procedure to register the ServiceNow application and integrate the ServiceNow API in Skyhigh CASB.

Prerequisite

  • For ServiceNow ODS, the ServiceNow admin should have access to ServiceNow's sys_dictionary and sys_db_object tables. The ODS configuration page fetches the ServiceNow objects for scanning from ServiceNow's sys_dictionary and sys_db_object tables. If the ServiceNow admin does not have access to ServiceNow's sys_dictionary and sys_db_object tables, assign the personalize_dictionary role to the ServiceNow admin and ensure that the assigned personalize_dictionary role has Access to (Access Control List) the sys_dictionary with read access and sys_db_object with read access ACL's.

    clipboard_eb3dc82d60b22d500483066a9c5118695.png
     
  • Based on the PoP where your instance is hosted, add the corresponding IP addresses to your allow list. For details about the specific IP addresses, see About Skyhigh Allow List IP Addresses.

NOTE: If you currently have an active ServiceNow instance integrated with Skyhigh CASB, and if the Skyhigh Support team contacted you for the PoP migration, you must migrate it to the new infrastructure. To migrate the instance, follow the steps in the Migrate Instances Between PoPs section.

Register the ServiceNow Application

  1. Log in to ServiceNow with an Admin account.
  2. Create a new application in ServiceNow as described here and configure the following:
    • In the ServiceNow home page, use the search bar to find Application Registry and select the corresponding result. 

      Welcome screen_select App Reg.png
       
    • Click New.

      Click New.png
       
    • Select New Inbound Integration Experience.

      Select Inbound application.png
       
    • In the Inbound Integrations page, click New integration.

      click New integration.png
       
    • Select the API access method for the integration as OAuth - Authorization code grant.

      Select OAUTH tolen.png
       
    • In the New record page, configure the following and then click Save:
      • Name. Enter the application name for the inbound integration.
      • Redirect URLs. Enter the redirect URI depending on Skyhigh CASB backend:
US Production: https://dashboard-us.ui.skyhigh.cloud/shndash/extensions/OAuthCallbackController

Integrate the ServiceNow API in Skyhigh CASB

  1. Log in to Skyhigh CASB with your tenant and go to Settings > Service Management.
  2. Click Add Service Instance, select ServiceNow.
  3. Enter a name for the instance and click Done.

    clipboard_e83882b984c9ef47af50d41c0a279deb5.png
     
  4. Select the ServiceNow instance you created. 
  5. Go to the Setup tab and under API, click Enable.
  6. On the Enable API page, click Provide API Credentials.

    clipboard_ea6924b218a3011686de72cb2eaa874ed.png
     
  7. Enter the details of the Custom OAuth Application created in ServiceNow and click Submit.
    • For the ServiceNow URL, in this example, you would replace ven01114 with your own ServiceNow instance. 
    • For the Admin Email, enter the ServiceNow Admin email.

      clipboard_e18c43730908b508f8ab8e73336fd02eb.png
       
  8. Click Allow.

    clipboard_e2cf36269bc6bd8bb0f539150ef655dc4.png

After ServiceNow API Integration Setup, wait for an hour to configure ODS Scan because the files, connect chats, and table in ODS Scan UI will be visible after an hour.

This note below is applicable only if a reverse proxy is configured.

NOTE:

If your ServiceNow instance is configured through a reverse proxy and while enabling API via a reverse proxy, you might encounter an error and may not see the Step 8  screen ( [clipboard_e0a002115cecbcec377d3bc94aaae05cc.png]--> click to view the screen) with options Allow/Deny. In that case, configure the following CAP policy to Skip Cert Check: Redirect All, as shown in the screenshot below for the API user configured to enable API. 

clipboard_e247f951ddb6934b7bb255e8a7948a20e.png

Migrate Instances Between PoPs 

To enhance performance, scalability, and security, we are transitioning our services from the current infrastructure to a newly established Point of Presence (PoP) specifically designed for processing CASB API-based services. If your instance is part of this migration, the Skyhigh Support team will contact you and assist with the process. 

Perform the steps below to complete the migration:

  1. Identify your PoP. Contact Skyhigh Support to determine your assigned Point of Presence (PoP).
  2. Update Allow Lists. Based on the PoP where your instance is hosted, add the corresponding IP addresses to your allow list. For details about the specific IP addresses, see About Skyhigh Allow List IP Addresses.
  3. Request Migration. Once the IP addresses are allowed, contact Skyhigh Support to initiate the instance migration to the new PoP.

 

  1. Back to top
  • Was this article helpful?

Recommended articles

  1. Article type
    Topic
  2. Tags
    This page has no tags.