AKKU

SSO for ServiceNow

Overview

Akku, developed by CloudNow Technologies, is a robust Identity & Access Management (IAM) solution designed to streamline user provisioning, access management, and activity monitoring throughout the user lifecycle. It offers administrators the tools to efficiently manage user privileges and ensure data security in cloud environments. With Akku, organizations can confidently embrace cloud technology while maintaining compliance with standards and regulations. Its comprehensive features enable seamless onboarding, secure authentication, a single point-of-access to all applications, enforcement of access policies, and monitoring of user activity to detect and respond to security threats effectively while enhancing the user experience significantly. By prioritizing data security, privacy, and compliance, Akku provides users with peace of mind while improving overall productivity. With its flexible and scalable architecture, Akku is well-equipped to meet the evolving needs of modern organizations in managing their identity and access requirements.

Introduction

ServiceNow SAML with Akku provides a secure and reliable method for authenticating users. To set it up, you'll need a ServiceNow account, an Akku account, and the SAML Integration feature enabled. First, configure your Akku instance by adding the ServiceNow SAML app and specifying the required fields. Then, grant Akku permission to access your ServiceNow domain. Next, set up the SAML request URL and authentication URL in your Akku instance. Finally, test your integration to ensure seamless authentication for your users.

Configure ServiceNow Settings on Akku

The steps listed below provide instructions on Adding the Application app from the QuickLaunch App Store and Configuring SAML SSO to the added Application app

1

Login to IDP

Login to IDP (Akku) as an administrator. Go to App Management, in the available apps choose 'ServiceNow' and click on Setup/Configure SSO. Then navigate to the integration tab to generate the SAML metadata file.

Screenshot
ServiceNow SSO Configuration
2

Login to ServiceNow

Login into service now admin account.

Screenshot
ServiceNow Admin Dashboard
3

Start Building

Click on 'Start Building', which will create an instance of your account.

Screenshot
Start Building
4

Configure Service Provider

With that instance (e.g., https://dev197504.service-now.com/), configure it in IDP as a service provider.

5

Install SSO Plugin

Now click on ALL and search for plugins and install “Integration-multiple provider single sign on installer”.

6

Identity Provider Section

Search on multi-provider-sso and go to identity provider section.

Screenshot
Identity Provider Section
7

Configure Identity Provider

Click 'New' to configure the identity provider (AKKU).

Screenshot
Configure Identity Provider
8

Select SAML

In the "What kind of SSO are you trying to create?" section, select SAML.

Screenshot
Select SAML
9

Import Identity Provider Metadata

In the 'Import Identity Provider Metadata' pop-up that appears, select XML and paste the XML file content you had copied in IDP, then click import.

Screenshot
Import Identity Provider Metadata
10

User Field Configuration

All the required fields will be auto-filled. Scroll down and click the 'Advanced' tab. Make sure the value "email" is entered in the User Field.

Screenshot
User Field Configuration
11

Encryption and Signing

In the 'Encryption and Signing' tab, enable all the checkboxes.

FieldInstruction
Signing/Encryption Key AliasEnter the alias name you created for the SAML 2.0 Keystore. By default, the integration looks for the alias saml2sp.
Signing/Encryption Key PasswordEnter the password to your SAML 2.0 Keystore. By default, the password is the same as the default alias name.
Screenshot
Encryption and Signing
12

Generate Metadata

Now generate the metadata file and configure it in IDP.

13

Test Connection

Click 'Test Connection'. You will be asked to log into Akku. Once the connection is successful, click 'Activate'.

14

Enable Multi-Provider SSO

In the left pane, navigate to Multi-Provider SSO → Administration → Properties. Make sure that Enable multiple provider SSO is enabled. In the field for user identification, change "user_name" to email as the value.

Screenshot
Enable Multi-Provider SSO
15

Final Akku Configuration

With that metadata file,configure it in AKKU.

Screenshot
Final Akku Configuration