Connecting ServiceNow
Last updated: October 8, 2024
Background
This article walks through the steps for connecting ServiceNow to Lumos and helps you resolve common setup issues.
Required plan & roles
There's no minimum ServiceNow plan required to connect the integration.
The ServiceNow integration inherits the permissions of the user that connects the integration. Review the Scopes section on this page to ensure that the user completing the connection has the right roles.
Instructions
1. Click on the ServiceNow card in your Lumos integrations (Reconnect or add new).
To get the values you need for Lumos in ServiceNow, follow the instructions below.
Instance Subdomain
1. Navigate to your ServiceNow login URL. Your login URL is usually in the form of subdomain.service-now.com.
2. Paste the subdomain.service-now.com value from your login URL into the Instance Subdomain field in Lumos.
ServiceNow Client ID and Client Secret
During this step, you'll be creating an OAuth app in ServiceNow.
1. Log into your ServiceNow tenant.
2. Go to the Application Registry menu.
3. Create a new app and choose the option to "Create an OAuth API endpoint for external clients"). More info on how to do this can be found here.
4. In the app details, provide the info below.
Name: Lumos
Redirect URL: https://app.lumosidentity.com/integrations/servicenow_oauth2_callback
Everything else can be left as-is.
5. Click into the app and copy the Client ID and Client Secret values, then paste them into the ServiceNow Client ID and ServiceNow Client Secret text boxes in Lumos.
6. Click Connect ServiceNow to connect the integration.
Scopes
The ServiceNow integration needs the following roles.
Scope | Required | Description |
user_admin | ✅ | User administrators can administer users, groups, locations, skills, and companies. |
rest_service | ✅ | Allows calls to be made over the REST API. |
catalog_admin | ✅ | Catalog administrators can manage the Service Catalog application, including catalog categories and items. |
sn_request_comments_write | ❌ | Write comments to requests. Required for logging ITSM requests for access requests. |
sn_request_write | ❌ | Create new requests. Required for logging ITSM requests for access requests. |
sn_incident_write | ❌ | Create new incidents. Required for logging ITSM incidents for access requests. |