Shibboleth and Servicenow

[David Langenberg]

Hi Brian,

We integrated with service-now.  The only attribute sent over shib is indeed the username.  The rest of the attributes that SN needs though they pull from our LDAP servers in a nightly batch as SN needs all users pre-provisioned to work.

Dave

--
David Langenberg
Identity & Access Management
The University of Chicago




On Feb 8, 2013, at 10:11 AM, "Bryan E. Wooten" <bryan.wooten at utah.edu<mailto:bryan.wooten at utah.edu>>
 wrote:



From: "Bryan E. Wooten" <bryan.wooten at utah.edu<mailto:bryan.wooten at utah.edu>>
Date: Thursday, February 7, 2013 4:42 PM
To: "users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net>" <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net>>
Subject: Shibboleth and Servicenow

Hi all,

We are investigating deploying Servicenow "in the cloud". I see that they are a member of Incommon as of last December, however they don't seem to appear in our metadata file.

I found this link: https://confluence.id.ubc.ca:8443/display/SHIB/Appendix+A+-+Shibboleth+Integration+with+ServiceNow that shows they can integrate with Shib. In the linked document the only attribute being released in the user id (eppn?).

In our conversations with Servicenow they need additional attributes (manager, dept id, location, others). None of these are present in eduPerson. Servicenow would ilke to connect to our AD to obtain these attributes.

Does anyone have experience with Servicenow? How did you provide these additional attributes?

I'd like to find a solution that does involve them connecting to our AD, I'd like to just release them via Shib. And of course I some FERPA concerns.

Thanks for any insight.

-Bryan
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130208/e122059e/attachment.html