Create and manage AD Service Account in IdentityNow

Identity Security Cloud (ISC) ISC Discussion and Questions
1

We have a requirement to provision AD Service Account after user submits a self-service request in ServiceNow (or IdentityNow if possible) and fills in the details of the Service Account (description, owner etc.).

Is it possible to implement the provisioning through IdentityNow? The options we could think of are as follows.

  • CreateAccount API
    The API doesn’t create account in target systems, so this approach won’t work.

  • Lifecycle event through AD Connector
    Could we provision the service account and link it to the owner’s identity? If yes, how is this done in IdentityNow? If not, should we create new Identity for the Service Account (i.e. Each Service Account has its own identity)?

Please advice, thanks much!

2

We were in this same situation and ended up creating the account in AD directly and letting IDN aggregate it.

3

Jup we are going to build automation to handle all service accounts. They just don’t seem to be a good fit for IdentityNow.

4

You can probably use NELM to request new identity(for each service account), assign owner as the manager and then initiate provisioning to AD from IdentityNow.

Just assumption but things might vary based on your requirement.