Skip to content
Integrations
SaaS Integrations
ServiceNow ITSM

ServiceNow ITSM

This Integration requires Fides Cloud or Fides Enterprise. For more information, talk to our solutions team. (opens in a new tab)

ServiceNow IT Service Management (ITSM) (opens in a new tab) is a cloud-based platform for managing IT services, including incidents, problems, change requests, service catalog requests, and knowledge management. This integration processes access and erasure requests against personal data stored in a ServiceNow instance, covering user records, ITSM tickets, audit logs, attachments, and email artifacts.

Prerequisites

In order to integrate with ServiceNow ITSM, you'll need to collect the following information:

NameDescription
Domain*The hostname of your ServiceNow instance, without the protocol (e.g. your-instance.service-now.com).
Client ID*The Client ID from your OAuth Application Registry record. See ServiceNow's OAuth setup documentation (opens in a new tab) for details.
Client secret*The Client Secret associated with the OAuth Application Registry record above.

Configuring ServiceNow for the integration

Before adding the integration in Fides, prepare the ServiceNow instance:

  1. Enable the client_credentials grant. In ServiceNow, set the system property glide.oauth.inbound.client.credential.grant_type.enabled to true.
  2. Create an OAuth Application Registry record. Navigate to System OAuth → Application Registry → New → "New Inbound Integration Experience" → "OAuth - Client credentials grant". Note the generated Client ID and Client Secret.
  3. Assign an integration user. The OAuth registry must be tied to a ServiceNow user account with read and write access to sys_user and the ITSM tables (incident, problem, change_request, change_task, sc_request, sc_req_item, sc_task, kb_knowledge, kb_feedback, task_time_worked, sys_audit, sys_attachment, sys_journal_field, sys_email, and related membership tables). Erasure additionally requires write access on the user and ticket tables.

Integrating with ServiceNow ITSM

To integrate an existing system with ServiceNow ITSM:

  1. Navigate to Data mapView Systems and choose the system that you want to connect.
  2. Click on the Integrations tab.
  3. Pick the vendor or system type that you want to integrate with from the Connection type drop-down menu.
  4. Complete the required fields for the integration and click Save.

You may confirm your connection is working using the Test connection button, if desired.

To learn more, please see our guide for Managing Integrations.

Technical detail

Fides utilizes API endpoints to access the API service for a SaaS application. An API service is the programmatic interface through which Fides can query and update data within an application to access, rectify, or delete personal information. Each SaaS tool will have a unique set of endpoints to enable privacy functions.

The ServiceNow ITSM integration uses the ServiceNow Table API (opens in a new tab) for all read and write operations. Identity resolution is performed via direct lookup against sys_user.email.

Erasure behavior

Erasure requests mask personal data in place via HTTP PATCH rather than deleting records. This preserves ITSM audit, SLA, and retention obligations and avoids orphaned references in tickets owned or modified by other users. Immutable identifiers (sys_id, user_name) are preserved so that historical references remain intact; ServiceNow rejects PATCH requests that attempt to modify these fields.

ServiceNow ITSM endpoints

In the table below, you can find which ServiceNow tables are accessed for each type of privacy function. All operations go through the ServiceNow Table API.

Privacy functionTableDescription
Access Requestssys_userThe user record matched by email; the root of identity resolution.
Access Requestssys_user_grmemberGroup memberships for the user.
Access Requestssys_user_has_roleRole assignments for the user.
Access Requestssys_user_preferenceUser-level preferences and settings.
Access RequestsincidentIncident tickets where the user is caller, opener, or assignee.
Access RequestsproblemProblem records associated with the user.
Access Requestschange_requestChange requests associated with the user.
Access Requestschange_taskChange tasks associated with the user.
Access Requestssc_requestService catalog requests submitted by or for the user.
Access Requestssc_req_itemRequested items belonging to the user's service catalog requests.
Access Requestssc_item_optionVariable values captured on the user's requested items.
Access Requestssc_item_option_mtomMany-to-many links between requested items and their option values.
Access Requestssc_taskCatalog tasks generated from the user's requested items.
Access Requestskb_knowledgeKnowledge articles authored by the user.
Access Requestskb_feedbackFeedback submissions left by the user on knowledge articles.
Access Requeststask_time_workedTime entries logged by the user against tasks.
Access Requestssys_auditAudit log entries attributed to the user (queried by user_name).
Access Requestssys_attachmentAttachments created by the user (queried by sys_created_by).
Access Requestssys_journal_fieldJournal field entries (work notes, comments) authored by the user.
Access Requestssys_emailEmail records that include the user as a recipient.
Update or Erasure Requestssys_userMasks PII fields (email, name, phone, address, etc.); preserves sys_id and user_name.
Update or Erasure RequestsincidentMasks user-identifying content fields on incident records.
Update or Erasure RequestsproblemMasks user-identifying content fields on problem records.
Update or Erasure Requestschange_requestMasks user-identifying content fields on change request records.
Update or Erasure Requestschange_taskMasks user-identifying content fields on change task records.
Update or Erasure Requestssc_requestMasks user-identifying content fields on service catalog requests.
Update or Erasure Requestssc_req_itemMasks user-identifying content fields on requested items.
Update or Erasure Requestssc_taskMasks user-identifying content fields on catalog tasks.
Update or Erasure Requestskb_knowledgeMasks user-identifying content fields on knowledge articles.
Update or Erasure Requestskb_feedbackMasks user-identifying content fields on knowledge feedback submissions.