• Step 1. Azure AD – Register ServiceNow
  • Step 2. ServiceNow – Enable Azure AD Integration
  • Step 3. Configure Redirect URI in Azure
  • Step 4. Azure AD – Assign Users
  • Step 5. ServiceNow – Test Connection
  • Optional: Step 6. User Provisioning (SCIM)

We are essentially setting up SSO (Single Sign-On) and SCIM (automatic user provisioning).

Here are the structured steps:

Step 1. Azure AD – Register ServiceNow

We need to register an app:

  • App registered → we have:
    • Application (client) ID
    • Directory (tenant) ID

We need to generate a secret:

  1. In the Azure portal → Certificates & secrets → New client secret.
  1. Copy and store the secret value (you’ll need it in ServiceNow).

Step 2. ServiceNow – Enable Azure AD Integration

  1. Log into the ServiceNow instance
  2. Go to System OAuth > Application Registry.
  1. Click New → choose Connect to a third-party OAuth Provider.
  1. Replace <tenant_id> with your Directory (tenant) ID.

User roles applied to provisioned users.

Update.

Step 3. Configure Redirect URI in Azure

  1. In Azure portal, open the ServiceNow app, Authentication.
  2. Add a redirect URI:

Click Save.

Step 4. Azure AD – Assign Users

  1. Go to Azure AD → Enterprise applications → your ServiceNow app.
  2. Under Users and groups, assign users who should have access.

Step 5. ServiceNow – Test Connection

  1. In ServiceNow, enable the SSO plugin.

After installing navigate to Multi-Provider SSO.

Select OIDC.

Optional: Step 6. User Provisioning (SCIM)

If you also want Azure AD to automatically create/update users in ServiceNow:

  1. In Azure → Enterprise Applications > ServiceNow > Provisioning.
  2. Set provisioning mode to Automatic.
  3. Enter ServiceNow tenant URL:https://<your-instance>.service-now.com
  4. Enter ServiceNow admin username/password.
  5. Test connection → then enable.