my name is mike barr and today i'm going to show you how to enable azure sso and user provisioning in your pdi so as you can see i'm in my pdi here one thing you're gonna need to do before you get started in service now is go to plugins all right and you wanna make sure that you have this particular plugin enabled integration multiple provider single sign in once that you have it installed refresh your browser and then simply type in ssl and you'll see the properties here so you can see i have the base properties of enable enable importing of users debugging and the field that we are going to use to basically authenticate with and then in the pdis you get some of this out of the box stuff which is it's great but we're not going to use any of this stuff in this particular tutorial so now that i have that done let's move on over to azure because that's where a lot of the work is going to take place and then we'll come back to servicenow in azure and you guys are probably wondering well how do i get here well you might know that microsoft purchased github and with that you get some free stuff from microsoft so what i'm basically using is so if i log out here just to show you yep signed out so basically because i have a github account with my gmail account i also have a freemium if you will azure account and with that comes with a free azure 80 so to speak it's not nothing like your your enterprise 80 type stuff but hey it works in this particular case here so back in 80 or back in azure i should say and i've got azure active directory over here on my left hand side go ahead and click that let's look at my users unfortunately it's just me but that's okay that's all we need so let's go back on the left hand side here you're going to look for enterprise applications so let's pull that up and if you go through you're going to see the applications that you're subscribed to but also if you click on new application you're going to see a ton of others so in this case we're gonna search for servicenow i'm gonna click on it now what i'm gonna do is i'm gonna label this as servicenow pdi i'm gonna click add and i'm doing this for a reason because why didn't i name it the way that i did well it's because you can add more than one so if i actually come back here and click on your application again click type service now there we go and let's just say you're doing this for a client you want to provision all throughout all the environments so in this case i can use test or prod however you want to name it but the idea is that you can add more than one and it's not prevalently known that you can do that or you need to add a separate application for each login but i wanted to make that known so let's go back to servicenow pdi great so now what i want to do is because i know i have a user i'm going to add my user to here so i got my bar my admin account select assign all right one and done no big deal so the next step is single sign-on which is what we're all here for it's gonna click saml all right so now i need to provide a couple things here we're going to do basically it's it's as easy as this this this slash nav page dot do and that's really it so i've got my my three urls here i'm gonna click save all right good to go we'll test later all right and all the stuff is is nice but really all you need to do is come here you come to this configuration page microsoft will automatically send the information that you need to servicenow from azure so here's what we're going to do i don't want to use my admin account so i'm going to create a new one click new and use azure.id azure ad and we're going to give it a password save it and for the sake of this tutorial we're gonna give it admin because that's what it needs but from a secure perspective i'll lock this out web service only that's what you should do so i've got my azure.ed account let's come back here azure there we go see got to sign it successfully you're like all right well what do i do from here that's actually quite simple so sso identity providers you'd see now boom microsoft has pushed over all the information that we need from azure ad in over to our instance so the first thing that you're going to do is add the cert won't work if you don't do this all right easy enough so user provisioning we're going to leave that there one last thing now that i'm connected speaking of provisioning we are going to add provisioning so we're going to click on so you go to provisioning here click on configure automatic provisioning and that's not what i wanted get started that's what i wanted perfect automatic put in my dev account azure and id super secure password i'll put in my email and we're gonna test the connection boom one and done save all right so provisioning has been started usually it turns on or gives me an opportunity to turn it on by itself uh you know i can click on edit and just double check your provisioning status yeah normally this doesn't happen but hey i'll set it back up no big deal all right notify me provisioning on got my scope perfect save save yeah all right it's just being funky azure azure is weird like that sometimes so let's save it yeah apparently you have to test it before you're actually allowed to save it servicenow does the same thing all right so now that we're done here there's a couple things we need to change here the first thing that we need to change is get rid of this guy don't need it the other thing is here so azure basically sets this field automatically well from my experience this does not work change to username all right last thing you need to do is change this guy as you saw in my recent selections here you need to choose the multi-sso v2 saml custom script includes before you do anything else don't save this record because if you save it without testing the connection you will lose all the work that you do so we're going to test it and let's see if it works all right all right redirect me to github which is cool and boom we've got it this is this is exactly what you should see this is exactly how it should happen so we're going to activate this bad boy pretty much we're done the last thing i'm going to do here to kind of show to finish off this proof of concept is set as auto rdp all right so basically what this means is that when you go to your instance your pdi instance so dev you know whatever.servicenow.com you're going to be redirected to your azure ssl but before i do that let me just make sure that i have this enabled because this is not going to work if it's not all right let's close that puppy out i'll log out yep log on successful perfect and here we are we'll look at that it must be because i'm already logged in but you can tell this is not this was not the account that i started with so if i impersonate the account that i originally started with like bar see got two i'm back to the original screen so you can see there that within a few minutes i was able to successfully i just want to see if i can show you that login process external url there we go so you can see here that sso has been successfully configured with azure and as i mentioned going back to the main overview screen in azure active directory is that you can set up multiple servicenow provisioning for each of your instances so right now we did it for the pdi but if you're working if you're a customer if you're working for a client you can easily set up multiple instances of authenticating with your azure sso environment thank you very much for your time [Music] you