Connect a ServiceNow instance
Connects a ServiceNow instance with an OAuth client (Client Credentials grant, recommended) or with the username and password of a dedicated integration user. Strix verifies the credentials against the instance before it stores them encrypted. The OAuth Application User or the integration user needs the itil role so it can read and write the selected record table and read assignment groups. Only organization admins can connect integrations (parity with the dashboard).
Authorizations
API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.
Body
Connect a ServiceNow instance. Send client_id and client_secret for auth_method oauth_client_credentials, or username and password for auth_method basic. When auth_method is omitted, Strix uses basic if username is present and client_id is not, otherwise oauth_client_credentials.
URL or hostname of the ServiceNow instance, for example https://acme.service-now.com or acme.service-now.com. Strix uses HTTPS. Other schemes are rejected.
How Strix authenticates to the instance. oauth_client_credentials uses an OAuth API endpoint from the Application Registry with the Client Credentials grant and an OAuth Application User. basic uses the username and password of a dedicated integration user.
oauth_client_credentials, basic Client ID of the OAuth API endpoint. Required for auth_method oauth_client_credentials.
Client secret of the OAuth API endpoint. Required for auth_method oauth_client_credentials. Strix stores it encrypted and never returns it.
User name of the ServiceNow integration user. Required for auth_method basic.
Password of the ServiceNow integration user. Required for auth_method basic. Strix stores it encrypted and never returns it.
ServiceNow table that Strix writes vulnerability records to. Defaults to incident, which the itil role can create on a standard instance. The task table needs a create ACL that requires the itil role. A ServiceNow admin must add that ACL before Strix can create Task records. You can change the record type later in the ServiceNow integration settings or by connecting again. A change of record type clears the existing ticket links.
incident, task Response
Connected.
servicenow Normalized instance URL that Strix stored.
Authentication method that Strix stored.
oauth_client_credentials, basic ServiceNow table that Strix writes vulnerability records to.
incident, task