Setting up Servicenow SSO with WSO Access

This blog walks you through how to setup Servicenow SSO on WSO Access

If you don’t have a servicenow instance, you can sign up to the developer program and get an instance for testing purpose.

https://developer.servicenow.com/dev.do

After identifying a Servicenow instance, start from the Servicenow console.

Make sure you have the SSO plug-in installed on Servicenow with demo data loaded.

Have both Access and Servicenow open side by side.

Make sure the new certificate is named as “SAML 2.0”.

Copy the signing certificate from Access to Servicenow.

Use your Access and Servicenow URL in the properties.

On Access console, create a new Web app form Servicenow.

Assign the new app to users or user group. Assign the access policy to the app. For example, password and 2FA.

Create the same user account on both side. User name and Email must be the same. The other attributes are not necessary exactly the same if you don’t want to.

This is a demo video. 2FA is required to access Servicenow. A device marked as non-compliant will stop a device from accessing Servicenow.

In some cases, enterprise wants to further integrate with their corporate IdP such as azure to enjoy benefits from WSO and chosen IdP.

Here is an example with Azure AD

With the above setup, enterprises can take advantage of WSO device compliance and Azure AD Authenticator.

Here is a demo

https://youtu.be/MDq65Py12N4

Reference: https://www.vmware.com/pdf/vidm-servicenow-saml.pdf