ServiceNow Integration

If your organization uses ServiceNow to manage Business Applications and change workflows, you can integrate it with JFrog AppTrust to eliminate duplicate data entry and automate change management.

This integration treats ServiceNow as the source of truth for application definitions. Instead of manually maintaining application metadata in both systems, AppTrust automatically syncs from your ServiceNow catalog and embeds governance evidence directly into your existing change workflows.

The integration provides:

• Catalog Sync: Import of Business Application entities from ServiceNow into AppTrust
• Automated Change Requests: Trigger of Change Requests in ServiceNow from AppTrust lifecycle stages, populated with governance evidence
• Evidence Records: Provision of evidence records, created based on approvals and attached to application versions in AppTrust

This chapter documents the setup, configuration, and Change Request workflow of the ServiceNow integration with JFrog AppTrust.

Setup and Configuration Overview

In order to correctly sync business applications from ServiceNow to AppTrust, you need to define how to map fields in ServiceNow to AppTrust fields. The setup and configuration takes place in the following steps:

1. Set Up Authentication: Requires tasks in JFrog Platform and in ServiceNow. JFrog Platform Administrator permissions are required.
   • admin: Required to install the DevOps Change Velocity application/plugin from the ServiceNow store.
   • sn_devops.admin (DevOps Administrator) or sn_devops.tool_owner (DevOps Tool Owner): Required to connect, configure, and manage the JFrog tool integration within the DevOps Change Velocity workspace.
2. Configure Global Level: Takes place in JFrog Platform, and an Administrator level user is required.
3. Configure Project Level: Takes place in JFrog Platform, and a Project Administrator (or higher level administrator) is required.
4. Synchronize Applications: This includes choosing the relevant projects and applications and syncing them with AppTrust. A ServiceNow user with sn_devops.admin (DevOps Administrator), or sn_devops.tool_owner (DevOps Tool Owner) permissions is required for this.

Version Lifecycle and Change Requests

Once the configuration steps are completed, you will be able to start an application version lifecycle in AppTrust. In order to see a change request in ServiceNow, you will create an application version and promote it through the stages of the lifecycle. Upon promotion to the designated stage, a change request will be triggered and visible in ServiceNow. The entire process is described in detail in Complete a Change Request.

What's Next?

Go to the first procedure in the integration, Set Up Authentication.