BeyondTrust Entitle delivers just-in-time, time-bound access to cloud resources and applications - and this app brings those requests into ServiceNow, where your employees already work. Users open the Request Entitle Access catalog item, see only the resources Entitle reports them eligible for, pick an access duration from your configured options, and submit. No standing privileges, no separate portal to learn.
Approvals run natively in ServiceNow: route to a default approval group or the requester's manager, and automatically escalate long-duration requests to your CAB approval group. Need your own logic? Replace validation, approval, or notification behavior - or the entire request flow - with your own Flow Designer subflows, built from shipped templates. Once approved, the request is created in Entitle, and its status is reconciled back into ServiceNow via scheduled polling or real-time webhook events, closing the requested item when access reaches its final state.
Requires a BeyondTrust Entitle tenant and API token. Installs together with the BeyondTrust Entitle Spoke and communicates directly with the Entitle cloud API over HTTPS - no MID Server required.
- Just-in-time access, natively in ServiceNow — users request time-limited access to Entitle roles and bundles straight from the Service Catalog
- Smart eligibility — requesters see only the resources they're eligible for, backed by a cached, auto-refreshing sync with Entitle
- Approvals your way — ServiceNow-native approvals with CAB escalation and no-code Flow Designer hooks at every stage
- Always in sync — status reconciliation via polling and real-time webhooks
Initial Release (v26.1.2)
First release of the BeyondTrust Entitle app for ServiceNow, including:
- "Request Entitle Access" Service Catalog item with per-user eligibility filtering and configurable access durations
- ServiceNow-native approval workflow with optional CAB escalation
- Eligibility caching with configurable refresh intervals
- Request status reconciliation via scheduled polling and inbound webhooks
- Flow Designer subflow hooks for customer customization of validation, approval, and notifications
ServiceNow requirements
- Service Catalog and Flow Designer (included in the base platform; no additional ServiceNow products such as ITSM Pro, ITOM, or Security Operations are required)
- Service Portal for the end-user request experience
BeyondTrust requirements
- An active BeyondTrust Entitle tenant with an API token for integration
- Optional: Entitle audit-log streaming, if enabling real-time webhook updates (scheduled polling is used otherwise)
No MID Server is required — the app communicates with the Entitle cloud API directly over HTTPS.