--- title: "ServiceNow integration: ServiceNow Configuration" slug: "servicenow-integration-servicenow-configuration" updated: 2025-02-02T09:39:51Z published: 2025-02-02T09:39:51Z canonical: "support.kandji.io/servicenow-integration-servicenow-configuration" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.kandji.io/kb/llms.txt > Use this file to discover all available pages before exploring further. # ServiceNow integration: ServiceNow Configuration Before completing the integration in Kandji, you will need to install the Kandji ServiceNow application in the ServiceNow Integration Hub, create an OAuth API application, and add a service account user in your ServiceNow console. ### Install the Kandji ServiceNow App If not already, you will need to install the Kandji ServiceNow Integration Hub app in your ServiceNow instance. Installing the app will set up some of the required dependencies in your ServiceNow tenant. 1. Go to the [ServiceNow store](https://store.servicenow.com/sn_appstore_store.do#!/store/home). 2. Find Kandji. 3. Install the Kandji integration application by clicking on **Get**. You may need to authenticate to the ServiceNow store before being able to install the app. The credentials used should have the ability to install Integration Hub Store apps. ### Create an OAuth App Kandji uses a ServiceNow OAuth API client that leverages the Grant Type “Resource Owner Password Credentials (ROPC)” to request access and refresh tokens to interact with the ServiceNow instance. 1. Using a ServiceNow admin account, log in to your ServiceNow tenant ({yourtenant}.service-now.com). 2. In the **Filter navigator**, search for **System OAuth**. 3. Click **Application Registry**. 4. Click **Create an OAuth API endpoint for external clients**.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/0MF-vih3S_qlrShpgJUDesVubMoGVzWmEw.png) 5. Give the OAuth app a name. (Example: kandji_oauth_api) 6. In the **Redirect URL** field enter [**https://kandji.io**](https://kandji.io). 7. Click **Submit**.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/GUOmF_3V9erJiqo-RCzBhoeH9B7MvU6elw.png) 8. Go back to the OAuth app that you just created. 9. Highlight and copy the **Client ID**. 10. Reveal the **Client Secret** by clicking the padlock. 11. Highlight and copy the Client Secret, or optionally, If you enter your own client secret, be sure to click **update** to save the change.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/DXCyC8sGoBowI_EVOu9xMFYY57cFilV_XA.png) ### Adding a Service Account The service account user credentials are used to configure the ServiceNow integration in Kandji. > [!NOTE] > Any ServiceNow user account can be used as long as it has access to web services, and has the following roles assigned: cmdb_read, import_transformer, and rest_api_explorer. However, In general, it is good practice to create separate service accounts for each integration. 1. Using a ServiceNow admin account, log in to your ServiceNow tenant ({yourtenant}.service-now.com). 2. In the **Filter navigator**, search for **Users**. 3. Under User Administration, click **Users**. 4. Click **New** to add a new user.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/NDYHy1BKWS2BPMO7QoHrqWHt0DDTmT1mJw.png) 5. Enter a descriptive name for the user. (Example: `kandji_rest_api_user`). Copy the username to a safe place. You will use this credential when setting up the integration in Kandji. - Optionally, enter any additional information required by your organization. 6. Be sure to select **Web service access only**. 7. Click **Submit**.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/jhRzgFa6sqe2PrWn6liT4yMshzSba3dbtw.png) 8. Click on the new user that was just created, and click **Set Password**. 9. Click **Generate** to create the new password. 10. Copy the new password. 11. Click **Save Password**. Be sure to save this password in a safe place. This password will be used in Kandji when configuring the ServiceNow integration. 12. Click **Close** to go back to the Users page.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/2a22K7zASGtWXbf2krTsg8rKPqWblUnWeg.png) 13. While still on the user page, go to **Roles**. 14. Click **Edit**.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/2Ei0Rkm597Ganh-nbUyWr5DEi2OfrCfPOg.png) 15. Add the following roles to the service account user. - cmdb_read - import_transformer - rest_api_explorer ![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/embtxc67nb6dqpt90-ymc5yp4u0jvioeuw.png) 16. There should be a total of six new roles assigned. Three assigned and three inherited.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/-70miKlFXksSWNfe5hKy41e7X7FgwWJX3A.png) 17. To complete the user creation, click **Save**. ### Troubleshooting #### Verify that Kandji is a Discovery Source 1. In ServiceNow, enter **Dictionary** in the **Filter navigator**. 2. Under System Definition, click **Dictionary**. 3. In the Dicionary Entires search ensure that **Column name** is selected and then enter the column name **dicovery_source**. 4. Click on the **cmdb_ci** table.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/ftaeMyPIb2lAUk7d-KHxg87BkEvZirxdsQ.png) 5. Scroll down and select the **Choices** tab. 6. Make sure that **Kandji** is listed. If you do not see Kandji right away you can search for the Label *Kandji*.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/a0ExlW7fqDNzVTe3ebEcDhpwafMxqjnwhw.png) #### If Kandji does not show up as a Discovery Source This section describes how to run the **kandji_fix_script** manually in the event that Kandji does not automatically show up as a Discovery Source after installation of the Kandji Integration Hub application. 1. In ServiceNow, enter **Fix Script** in the **Filter navigator**. 2. Under System Definition, click **Fix Scripts**. 3. In the Fix Scripts search ensure that **Name** is selected and then enter the fix script name **kandji_fix_script**. 4. Click on the **kandji_fix_script** table.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/XcAjNPqkfpL3qZS9GJyjNixl6efJy0geGQ.png) 5. Click **Run Fix Script**. 6. In the Run Fix Script modal, click **Proceed in Background**.![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/3ghkseymu1pmcgkk0xkcblqlxxxjs4xx2a.png) Now Kandji should be listed as a Discovery source choice in ServiceNow. ### Up next [Kandji Configuration](/v1/docs/servicenow-integration-kandji-configuration) for the Kandji ServiceNow integration.