Skip to main content

ServiceNow

Requirements

Information that will help you design and plan the implementation of 1E CMDB Connect in your organization. This includes all the prerequisites and dependencies, which are necessary to install 1E CMDB Connect.

This page is part of the design phase of implementation.

Review Requirements and follow the requirements as listed below.

1E requirements

Category

Requirement

More details

1E system

  • For Basic Authentication

    A complete infrastructure of Tachyon 8.1 (on-premises) is required, either in a local network or hosted over the internet. This includes the 1E Client, deployed to all devices that you need to manage.

    The Basic Authentication feature must be installed on the 1E Server (Master Stack), and enabled in the Consumer and Experience 1E web applications.

  • For Modern Authentication

    A complete infrastructure of 1E 23.7 or later versions is required, either in a local network or hosted over the internet. This includes the 1E Client, deployed to all devices that you need to manage.

    The Modern Authentication is to be setup either using Microsoft Entra ID or Okta for external IdP.

Planning for 1E 8.1

1Elicense

  • Your 1E license should contain the ServiceNow-Integration entitlement.

  • 1E license should contain the following consumer in the ServiceNow Integration feature tag.

<Feature name="ServiceNow-Integration">
        <Consumer name="1EServiceNowCore" enable="on">
        </Consumer>
        </Feature>

Post-installation tasks for 1E CMDB Connect

1E consumer

  • A 1E consumer with the name 1EServiceNowCore must be registered in the 1E Settings application, Configuration, Consumers page

  • The Workflow column of the dbo.Consumer table in the 1E Master database for this consumer must have the following value:

[{"ReferenceType":0,"InstructionWorkflow":[{"InstructionType":1,"Workflow":{"StateMachine":"State"}}]}]

  • The workflow value is not set automatically, so be sure to see the link to the right to set the value.

1E Core 4.0.8 - Preparation: Add the ServiceNow consumer to 1E

1E Core 4.0.8 - Preparation: Editing the ServiceNow consumer workflow

1Eproxy user

  • A 1E user with Full Administrator role on any required instruction sets and management groups.

  • The 1E user must be an AD domain account. This account does not belong to a specific person and can be regarded as a service account, and does not require an email address.

  • 1E roles can be predefined system (Global) roles or custom roles. Global roles have permissions on all instructions sets and all devices. Custom roles can be optionally configured for all instruction sets or limited instruction sets, and all devices or management groups.

Post-installation tasks for 1E CMDB Connect

1E administrator

  • One or more 1E users are assigned the following role(s) for the specific purposes as given below. Users must be AD domain accounts

    Purpose

    Roles in 1E 9.0/23.7

    Roles in 1E 8.1

    Register the 1EServiceNowCore consumer

    1E ITSM Connect Actioner

    Full Administrator

    Upload instruction definitions and create instruction sets

    1E ITSM Connect Actioner

    Full Administrator

    Create 1E users and assign them to roles, create custom roles, and assign them to some instruction sets and management groups

    1E ITSM Connect Actioner

    Full Administrator

    Create Management groups if desired

    1E ITSM Connect Actioner

    Full Administrator

Permissions Menu for 1E 8.1

ServiceNow requirements

Category

Requirement

More details

1E Core

The latest version of the 1E Core needs to be installed and configured on your ServiceNow Instance.

1E Core 4.0.8 - Introducing 1E Core

ServiceNow

  • A working ServiceNow instance must be set up. This can be a demo instance or a production/vendor instance.

  • The current version of the application is supported on Vancouver, Tokyo, and Utah releases.

  • In ServiceNow discovery source list, add an entry for 1E Tachyon.

Installing 1E Tachyon CMDB ConnectInstalling 1E Tachyon CMDB Connect

ServiceNow users

  • ServiceNow users are needed as defined in the 1E Core documentation.

  • To administer the 1E CMDB Connect application, you need a user with x_1e_tachyon_cmdb.admin role.

  • To use 1E Information Services module, you need a user with x_1e_tachyon_cmdb.config_manager role

  • To view CI information fetched from Tachyon1E and the related lists, you need a user with x_1e_tachyon_cmdb.user role.

1E Core 4.0.8 - User Management

Post-installation tasks for 1E CMDB Connect

ServiceNow admin

  • This role allows its users to install and configure 1E CMDB Connect.

Installing 1E Tachyon CMDB ConnectInstalling 1E Tachyon CMDB Connect

ServiceNow

  • In ServiceNow discovery source list an entry for 1E Tachyon must be added.

Post-installation tasks for 1E CMDB Connect

ServiceNow Certificates (Modern Authentication)

  • The input certificate for Modern Authentication is a standard .pfx file containing a private key, hence it requires conversion from .pfx to .PEM and .JKS.

  • App ID (kid claim) is required and is provided by your 1E instance.

  • Client certificates (in .PEM and .JKS format) and App ID (Kid) are required, in case the application's authentication mechanism is set to Modern Auth. Also create a JWT key and associate it with the JKS certificate. Similarly, create JWT provider and associate it with the JWT key.

Preparation for Modern Authentication

In this section: