ServiceNow as Audit System

[asp]

Hi all,

We are trying to understand the usage of ServiceNow as an Audit System. We have a requirement to log servicenow tickets for access requested/provisioned in eic. 

https://docs.saviyntcloud.com/bundle/ServiceNow-v23x/page/Content/ServiceNow-as-an-Audit-System.htm

a. I am a bit confused by the explanation here - 

So flow is – request is submitted in EIC, approved in EIC --> then tasks are created in EIC --> then requests are created in SNOW and approved in SNOW --> provisioning is either in EIC or SNOW??

Is this the flow for both connected and disconnected endpoints? 

Also, what is the role of SNOWJAR.properties file. Is there any documentation on that? 

[rushikeshvartak]

What is your business use case ?

[asp]

Hi Rushikesh,

We need to be able to create servicenow tickets for any access requests that get submitted and processed in EIC for auditing purposes. (Different from servicenow ticketing for disconnected apps). For e.g. if somebody requests a SAP role and it gets approved/provisioned, a ServiceNow ticket will be generated to record this and used later for audit. 

[rushikeshvartak]

In this case you need to create service now rest connector and update connection / create ticket / ticket status json and attach connection to security system under service desk connection.

schedule wsretry for disconnected app to create / complete task in saviynt

https://docs.saviyntcloud.com/bundle/ServiceNow-v24x/page/Content/ServiceNow-as-a-Ticketing-System.h...

[asp]

Hi Rishikesh,

This is not for servicenow as a ticketing system. This is for a situation where application has a direct connector and fulfillment is automated (not manual). But then, we have to create a snow ticket, for audit purposes. The access is actually provisioned by the direct connector. Don't need the ticket for fulfillment. 

[Falcon]

When SNOW is used as an audit system, the approval and provisioning happens via Saviynt however as part of each task a ticket is created and closed in SNOW for tracking purposes. The documentation seems to be not correct and indeed confusing.