{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-guides/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition","tabs","tab"]},"type":"markdown"},"seo":{"title":"ServiceNow Application Vulnerability Response Configuration Guide","siteUrl":"https://docs.synqly.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"servicenow-application-vulnerability-response-configuration-guide","__idx":0},"children":["ServiceNow Application Vulnerability Response Configuration Guide"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This guide walks you through configuring ServiceNow Application Vulnerability Response (AVR)."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["ServiceNow supports token (API key) authentication or basic authentication with a username and password. Select the appropriate tab below:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["API key (recommended):"]}," Token authentication with an inbound REST API key. Requires the Washington DC ServiceNow release or later."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Username and password:"]}," Use a dedicated service account when your instance does not support API keys."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["After authentication is set up, configure the integration using the values from your chosen path."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Query only?"]}," Complete credentials in the tab that matches your authentication method. If you use a REST API key (",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["API Key"]}," tab), create the REST API Access Policies in that tab for the Table API."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Using ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["create_findings"]},"?"]}," You must also complete the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/provider-configuration/appsec-servicenow-findings-import-setup"},"children":["ServiceNow Application Vulnerability Findings Import Setup Guide"]},". That guide configures the Import Set staging table (",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["u_avr_staging"]},"), transform map, and related AVR objects that Synqly posts findings to. When you use an API key, add an ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Import Set API"]}," REST API Access Policy (step 6 in the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["API Key"]}," tab). Basic credentials do not use REST API Access Policies—access is enforced through roles and ACLs."]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"access-scope-and-purpose","__idx":1},"children":["Access scope and purpose"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The integration uses ServiceNow REST APIs against AVR tables. Query operations use the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Table API"]},". The ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["create_findings"]}," operation posts JSON rows to the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Import Set REST API"]}," (",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["/api/now/import/u_avr_staging/insertMultiple"]},"). When you use a REST API key, each REST surface needs its own REST API Access Policy."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Purpose"},"children":["Purpose"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Access needed"},"children":["Access needed"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["List discovered applications"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["AVR read (Table API)"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["List findings for an application"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["AVR read (Table API)"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["List application vulnerability findings"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["AVR read (Table API)"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Get a single finding"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["AVR read (Table API)"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Import findings into AVR (discovered applications, vulnerability entries, AVITs)"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Import and AVR write roles; REST API Access Policy for Import Set API when using an API key; ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/provider-configuration/appsec-servicenow-findings-import-setup"},"children":["import pipeline"]}]}]}]}]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"instance-prerequisites","__idx":2},"children":["Instance prerequisites"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Before starting, confirm:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Requirement"},"children":["Requirement"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Notes"},"children":["Notes"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Application Vulnerability Response (AVR)"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Installed and active; tables exist: ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["sn_vul_app_vulnerable_item"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["sn_vul_app_release"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["sn_vul_app_vul_entry"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Integration user"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Dedicated user with Table API access for queries; additional import/transform and AVR write access for ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["create_findings"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Normalized Severity Map"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Required for ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["create_findings"]}," — source must match ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["u_source"]}," values Synqly sends (default ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Synqly AVR"]},")"]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Suggested roles (adjust to your org):"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["import_transformer"]}," or ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["import_admin"]}," (for ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["create_findings"]},")"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["AVR administrator or equivalent read/write roles on ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["sn_vul_app_*"]}," tables"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["CMDB read access for optional business application lookup during import"]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"prerequisites","__idx":3},"children":["Prerequisites"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"log-in-and-create-a-service-account","__idx":4},"children":["Log in and create a service account"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Log in to ServiceNow"]}," as an admin."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create a service account (recommended)."]}," A dedicated account avoids broken integrations if an employee account is deactivated. Go to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["All > Organization > Users"]},", select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["New"]},", set ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["User ID"]}," (required), select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Internal Integration User"]},", and complete any other required fields. Open the new user, go to the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Roles"]}," tab, select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Edit..."]},", and assign roles that grant read access to Application Vulnerability Response records through the ServiceNow Table API."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["create_findings"]},", also assign import/transform and AVR write roles as described under ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#instance-prerequisites"},"children":["Instance prerequisites"]},"."]}]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Configuration"]},{"$$mdtype":"Tag","name":"Tabs","attributes":{"size":"medium"},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"label":"API Key (Recommended)","disable":false},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The preferred method is token authentication. For more details, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://www.servicenow.com/community/developer-advocate-blog/inbound-rest-api-keys/ba-p/2854924"},"children":["this guide from ServiceNow"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["API keys require the Washington DC ServiceNow release or later. Earlier instances need username and password; use the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Username and Password"]}," tab."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"1-verify-the-api-key-plugin","__idx":5},"children":["1. Verify the API Key plugin"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["All > Admin Center > Application Manager"]},", search for ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["HMAC Authentication"]}," and confirm ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["API Key and HMAC Authentication"]}," (",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["com.glide.tokenbased_auth"]},") is activated. Activate it if it is not."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"2-elevate-role","__idx":6},"children":["2. Elevate role"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Open the user menu (face icon), choose ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Elevate Role"]},", and select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["security_admin"]}," so you can configure API access."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"3-create-the-inbound-authentication-profile","__idx":7},"children":["3. Create the Inbound Authentication Profile"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Go to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["All > System Web Services > API Access Policies > Inbound Authentication Profile"]},". Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["New"]},", then ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create API Key authentication profiles"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Give the profile a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["name"]}," that reflects an integration API key. In ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Auth Parameter"]},", add ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Auth Header"]}," with the ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["x-sn-apikey"]}," header. Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Submit"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"4-create-an-api-key","__idx":8},"children":["4. Create an API Key"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Go to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["All > System Web Services > API Access Policies > REST API Key"]},". Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["New"]},", set a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["name"]}," for the key, and set ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["User"]}," to the service account you created above. Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Save"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use the lock icon to view and copy the token. Store it securely."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"5-set-the-table-api-access-policy","__idx":9},"children":["5. Set the Table API Access Policy"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Go to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["All > System Web Services > API Access Policies > REST API Access Policies"]}," and click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["New"]}," (this may take a moment)."]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Name:"]}," A descriptive name (for example, ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Synqly Table API"]},")."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["REST API:"]}," ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Table API"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Inbound authentication profiles:"]}," Add the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Inbound Authentication Profile"]}," you created in step 3, then ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Submit"]},"."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Confirm the new policy is ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Active"]}," with the scopes you expect. This policy is required for query operations (",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_applications"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_findings"]},", and related read APIs)."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"6-import-set-rest-api-access-policy-create_findings-only-appsec-sn-token-step-6-import-set-policy","__idx":10},"children":["6. Import Set REST API access policy (create_findings only) {#appsec-sn-token-step-6-import-set-policy}"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Required only when you use ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["create_findings"]},". Synqly posts finding rows to ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["/api/now/import/u_avr_staging/insertMultiple"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["All > System Web Services > API Access Policies > REST API Access Policies"]}," and click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["New"]},"."]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Name:"]}," A descriptive name (for example, ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Synqly Import Set"]},")."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["REST API:"]}," ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Import Set API"]}," (the ServiceNow UI label for the Import Set REST API; paths resolve under ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["now/import/..."]},")."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Inbound authentication profiles:"]}," Add the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["same"]}," profile you added on the Table API policy in step 5, then ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Submit"]},"."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["After you submit, confirm the new policy row is ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Active"]},", then complete ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/provider-configuration/appsec-servicenow-findings-import-setup"},"children":["ServiceNow Application Vulnerability Findings Import Setup Guide"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"configure-the-integration-api-key","__idx":11},"children":["Configure the integration (API key)"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["URL"]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"The root URL of your ServiceNow instance, for example ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://<tenant>.service-now.com/"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Token"]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"The API key value from step 4."]}]},{"$$mdtype":"Tag","name":"div","attributes":{"label":"Username and Password","disable":false},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For instances that do not support API keys, use basic authentication with the service account you created above."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Synqly authenticates with HTTP basic credentials against AVR tables. ServiceNow evaluates basic auth against the integration user's roles and ACLs directly—you do ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["not"]}," create REST API Access Policies for this path."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Assign the integration user:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Read access to AVR tables for query operations"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["import_transformer"]}," or ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["import_admin"]}," (or equivalent) for Import Set transform access"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["AVR write roles on ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["sn_vul_app_release"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["sn_vul_app_vul_entry"]},", and ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["sn_vul_app_vulnerable_item"]}," for ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["create_findings"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["CMDB read access if you rely on business application lookup during import"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Then complete ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/provider-configuration/appsec-servicenow-findings-import-setup"},"children":["ServiceNow Application Vulnerability Findings Import Setup Guide"]},". Ensure the user can write to the staging table, transform maps, and AVR tables your administrators protect with ACLs."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"1-set-a-password","__idx":12},"children":["1. Set a password"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["All > Organization > Users"]},", open the service account and set a password. Save the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["User ID"]}," and password securely; you will use them in Synqly."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"configure-the-integration-basic-auth","__idx":13},"children":["Configure the integration (basic auth)"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["URL"]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"The root URL of your ServiceNow instance, for example ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://<tenant>.service-now.com/"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Username"]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"The ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["User ID"]}," of the service account."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Password"]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},"The password for that user."]}]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"operation-specific-setup","__idx":14},"children":["Operation-specific setup"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To enable ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["create_findings"]},", complete the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/provider-configuration/appsec-servicenow-findings-import-setup"},"children":["ServiceNow Application Vulnerability Findings Import Setup Guide"]}," after you finish this guide. That guide configures the ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["u_avr_staging"]}," Import Set table, REST Insert Multiple mapping, transform map, ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["onBefore"]}," script, normalized severity map, and troubleshooting for AVR finding imports."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Credentials and roles from either tab work with ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["create_findings"]},". If you use the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["API Key"]}," tab, also create the Import Set REST API Access Policy in step 6 above. If you use ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Username and Password"]},", ensure the integration user has the import/transform and AVR table roles/ACLs described above."]}]},"headings":[{"value":"ServiceNow Application Vulnerability Response Configuration Guide","id":"servicenow-application-vulnerability-response-configuration-guide","depth":1},{"value":"Access scope and purpose","id":"access-scope-and-purpose","depth":2},{"value":"Instance prerequisites","id":"instance-prerequisites","depth":2},{"value":"Prerequisites","id":"prerequisites","depth":2},{"value":"Log in and create a service account","id":"log-in-and-create-a-service-account","depth":3},{"value":"1. Verify the API Key plugin","id":"1-verify-the-api-key-plugin","depth":3},{"value":"2. Elevate role","id":"2-elevate-role","depth":3},{"value":"3. Create the Inbound Authentication Profile","id":"3-create-the-inbound-authentication-profile","depth":3},{"value":"4. Create an API Key","id":"4-create-an-api-key","depth":3},{"value":"5. Set the Table API Access Policy","id":"5-set-the-table-api-access-policy","depth":3},{"value":"6. Import Set REST API access policy (create_findings only) {#appsec-sn-token-step-6-import-set-policy}","id":"6-import-set-rest-api-access-policy-create_findings-only-appsec-sn-token-step-6-import-set-policy","depth":3},{"value":"Configure the integration (API key)","id":"configure-the-integration-api-key","depth":3},{"value":"1. Set a password","id":"1-set-a-password","depth":3},{"value":"Configure the integration (basic auth)","id":"configure-the-integration-basic-auth","depth":3},{"value":"Operation-specific setup","id":"operation-specific-setup","depth":2}],"frontmatter":{"slug":"guides/provider-configuration/appsec-servicenow-setup","seo":{"title":"ServiceNow Application Vulnerability Response Configuration Guide"}},"lastModified":"2026-07-21T14:51:56.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/guides/provider-configuration/appsec-servicenow-setup","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}