The Delinea Server Suite/ Active Directory Integration brings governed, self-service access management for Windows Server and Active Directory environments directly into ServiceNow. Users request Zone Role access through a familiar Service Catalog item, while administrators retain full control through configurable approval rules, credential validation, and scheduled or on-demand synchronization of Zones, Computers, and Roles. This approach allows direct AD data retrieval that leads to the integration improves performance, scalability, and security for enterprise customers managing large-scale Windows Server environments, while giving IT and security teams the visibility and audit trail needed to enforce least-privilege access.
This integration delivers:
- Native Active Directory (AD) synchronization directly into ServiceNow for Zones, Computers, and Roles
- Self-service Service Catalog item for AD Zone Role access requests, supporting Temporary, Windowed, and Permanent access types.
- Configurable, rules-based Approval Workflow with Automatic and Required (PM) approval paths, support for multiple approvers, and built-in self-approval prevention.
- Automated provisioning and revocation of AD role assignments tied to request approval and access expiration.
- Centralized Configuration page with built-in credential validation for both Active Directory and ServiceNow, and a configurable Maximum Access Duration policy.
Version 1.0 – Initial Release
- Initial release of direct AD-to-ServiceNow synchronization
- Added self-service catalog item for AD Zone Role requests (Temporary, Windowed, Permanent).
- Added configurable Approval Rules engine supporting Automatic and Required (PM) approval types.
- Added Configuration page for AD and ServiceNow credential validation and Maximum Access Duration policy.
- Added scheduled (nightly) and on-demand synchronization for Zones, Computers, and Roles.
- Added Admin Logs module for request and error troubleshooting.
Before installing and using the application, ensure the following prerequisites are completed:
- ServiceNow Zurich release or later must be used.
- MID Server must be installed and validated.
- Discovery Plugin must be activated.
-
Active Directory Domain Service(AD DS) must be installed and operational
- The Active Directory domain must be accessible from the MID Server.
-
Download the access module for PowerShell as a separate package from the Delinea Download Center under Software Development Kits.
- Proper network connectivity between ServiceNow and Active Directory must exist.
Administrators must have:
- ServiceNow administrative access
- Active Directory integration credentials
- Access to import Update Set XML files