Forum Discussion

FahadAhmed's avatar
FahadAhmed
Brass Contributor
Nov 10, 2021
Solved

Azure Sentinel Playbook "User authentication failure" for Service Now integration

Hello,

 

I am using basic Logicapp to create incidents in Service Now. I have applied the correct username and password and getting the error below. If however, i directly visit the service now URL using the credentials, its logging in successfully. Any idea , why the error is occurring?

 

 

Thanks

Fahad.

 

  • GaryBushey's avatar
    GaryBushey
    Nov 10, 2021
    Service Now has an add-in that allows for incidents to be created directly from Microsoft Sentinel without the need for a logic app now. May be worth looking into that.

4 Replies

  • GaryBushey's avatar
    GaryBushey
    Bronze Contributor
    Nov 10, 2021
    Service Now has an add-in that allows for incidents to be created directly from Microsoft Sentinel without the need for a logic app now. May be worth looking into that.
    • FahadAhmed's avatar
      FahadAhmed
      Brass Contributor
      Nov 10, 2021
      Ok I found it, sharing the link below for the benefit of all.

      https://docs.servicenow.com/bundle/rome-security-management/page/product/secops-integration-sir/secops-integration-ms-azure-sentinel/task/install-and-configure-microsoft-azure-sentinel-integration.html

      Thanks gary for the help though.

      Thanks
      Fahad.
      • FahadAhmed's avatar
        FahadAhmed
        Brass Contributor
        Nov 10, 2021
        By the way the customer doesnt want to install the Service Now addon and wishes to use Logicapp, I got pass through the authentication error that was posted earlier, but now i am getting the below error.

        Please check your account info and/or permissions and try again. Details: Non-json response More diagnostic information: x-ms-client-request-id is 'A09524C0-90E3-43A4-95AF-A3D493AACD2F'

        Any reason why this is happening?
    • FahadAhmed's avatar
      FahadAhmed
      Brass Contributor
      Nov 10, 2021
      GaryA Thanks for the prompt response, can you share the link for the Service Now addin, as I am unable to find it. Most blogs are on logicapp connectivity of sentinel through service now, it would be great if we could use the Service Now addin as you mentioned. Any pointers will be helpful.

      Thanks

Resources