Skip to main content
The ServiceNow integration is opt-in and only available on Enterprise plans. Contact sales@infisical.com to get access to the ServiceNow integration.
A ServiceNow connection authenticates Infisical to your ServiceNow instance with the username and password of a ServiceNow integration user. Infisical uses the connection to create access requests in the Infisical application on your instance, and to read back the decision your approvers make on each one.
This guide only authenticates Infisical with ServiceNow. Once the app connection is ready, you can use it to set up integrations.

​
Prerequisites

  • The Infisical application installed on your ServiceNow instance (see Step 1 of the ServiceNow integration)
  • Permission to create users and assign roles on the instance
  • A ServiceNow instance that Infisical can reach (if your instance restricts inbound traffic, allow Infisical’s IP addresses on its IP access control list)

​
Step 1: Create a ServiceNow integration user

Infisical signs in to ServiceNow as a dedicated integration user. Use a new user rather than a personal account, so you can change its password without affecting anyone’s access.
1
In ServiceNow, go to All > User Administration > Users.Users in the ServiceNow Navigator
2
Select New.New User
3
Fill out the user’s fields:
  • User ID: an identifier such as infisical-machine
  • First name and Last name: a recognizable name, such as infisical and machine
  • Active: checked
  • Identity type: Machine
Then, select Submit.New User Form
4
Open the new user from the Users list, then select Edit… on the Roles tab.User Roles Tab
5
In Collection, search for x_infis_approvals, move x_infis_approvals.secret-manager-integration to Roles List, and select Save.This role lets Infisical create access requests in the Infisical application and read their decisions. It doesn’t grant approval rights or access to anything else on the instance.Add the Integration Role
6
Select Set Password.Set Password
7
Select Generate, copy the password, and select Save Password. You’ll enter the password in Infisical in Step 2.Generate a Password
8
Copy the base URL of your instance, such as https://dev12345.service-now.com. The URL must use HTTPS and can’t include a path or a query string.

​
Step 2: Create the app connection

Next, create the app connection in Infisical.
To create the connection using the API, use the Create ServiceNow Connection endpoint.
1
In the sidebar, select Integrations, then open the App Connections tab.
2
Select Add Connection and choose ServiceNow.Select ServiceNow Connection
3
Fill out the form’s fields:
  • Name: a name for the connection, such as servicenow-prod
  • Description (optional): what the connection is used for
  • Method: Basic Auth
  • Instance URL: the base URL you copied in Step 1
  • Username: the User ID of the integration user
  • Password: the integration user’s password
Then, select Connect to ServiceNow.ServiceNow Connection Form
Before Infisical saves the connection, it checks that the username and password sign in to the instance. It doesn’t check the integration user’s role or whether the Infisical application is installed. If either one is missing, the first access request sent over the connection shows Not Submitted (see Troubleshooting).
Your ServiceNow app connection is ready to use.
ServiceNow Connection Created

​
Step 3: Configure integrations

Now that your ServiceNow app connection is configured, you can use it to set up the following integration:

ServiceNow integration

Route Infisical access requests through ServiceNow approval flows.

​
Troubleshooting

The username or password is wrong, or the user is locked out or inactive.
The URL isn’t the base URL of your instance, or the instance is hibernating. Wake the instance, then enter its base URL.
The instance URL is wrong, or the instance blocks traffic from Infisical. Allow Infisical’s IP addresses on the instance’s IP access control list.
The Infisical application isn’t installed or active on the instance. Install it, then select Retry on the request.
The integration user’s password changed, or the user doesn’t have the x_infis_approvals.secret-manager-integration role. Update the connection or the user, then select Retry on the request.
An access policy still uses the connection. Select another connection on the policy, or switch the policy back to Infisical approvals, then delete the connection.