FortiSOAR ServiceNow connector OAuth authentication

[crimali]

Hello,

does anyone have done the integration between ServiceNow and FortiSOAR using oauth? The ServiceNow administrator created ClientID and Secret but the connector configuration also requires Username and password.

[RenuAndh]

Yes it requires Client ID, Secret, Username and Password as per ServiceNow document. The access token is generated out of these input parameters and this token is used further.

[crimali]

Thank you
RenuAndh, I would like to know what is the relationship between ClientID and Secret and Username and Password. On ServiceNow, ClientID and Secret are created via the 'Create an OAuth API endpoint for external clients' option. How should you create UserName and Password? Important: You have enabled instance-level MFA on ServiceNow.

[RenuAndh]

Internally when calling ServiceNow API the grant_type is set to 'password' (grant_type=password&client_id={client_id}&client_secret={client_secret}&username={username}&password={password}). Please check with this link: https://docs.servicenow.com/bundle/washingtondc-platform-security/page/administer/security/reference...

The Username and Password are the same which you were using for Basic Auth to connect to ServiceNow server. The connector document is here: https://docs.fortinet.com/document/fortisoar/3.2.0/servicenow/384/servicenow-v3-2-0

[crimali]

You said:

The Username and Password are the same which you were using for Basic Auth to connect to ServiceNow server. The connector document is here: https://docs.fortinet.com/document/fortisoar/3.2.0/servicenow/384/servicenow-v3-2-0

but the username I can use is necessarily set with MFA (we have enabled instance-level MFA on ServiceNow) and, for this reason, it wouldn't work with Basic Authentication.

I tried the curl command suggested by the link you sent (replacing the values with my own)
curl -d"grant_type=password&client_id=be3aeb583ace210011c15b24a43e25d8
&client_secret=client_password
&username=admin&password=admin"
https://instancename.service-now.com/oauth_token.do.

Unfortunately it doesn't work with my MFA username.

[RenuAndh]

Please refer this: https://docs.servicenow.com/bundle/vancouver-api-reference/page/integrate/inbound-rest/concept/c_RES...

[crimali]

Thank you
RenuAndh. So I think the ServiceNow connector does not support MFA user authentication.

[RenuAndh · Accepted solution]

We will consider adding this feature in upcoming releases. Thank you for bringing it to our attention!