Forum Discussion

Brass Contributor

Nov 10, 2021

Solved

Azure Sentinel Playbook "User authentication failure" for Service Now integration

Hello, I am using basic Logicapp to create incidents in Service Now. I have applied the correct username and password and getting the error below. If however, i directly visit the service now URL...

GaryBushey
Nov 10, 2021
Service Now has an add-in that allows for incidents to be created directly from Microsoft Sentinel without the need for a logic app now. May be worth looking into that.

GaryBushey

Bronze Contributor

Nov 10, 2021

Service Now has an add-in that allows for incidents to be created directly from Microsoft Sentinel without the need for a logic app now. May be worth looking into that.

FahadAhmed

Brass Contributor

Nov 10, 2021

Ok I found it, sharing the link below for the benefit of all.

https://docs.servicenow.com/bundle/rome-security-management/page/product/secops-integration-sir/secops-integration-ms-azure-sentinel/task/install-and-configure-microsoft-azure-sentinel-integration.html

Thanks gary for the help though.

Thanks
Fahad.

FahadAhmed
Brass Contributor
Nov 10, 2021
By the way the customer doesnt want to install the Service Now addon and wishes to use Logicapp, I got pass through the authentication error that was posted earlier, but now i am getting the below error.

Please check your account info and/or permissions and try again. Details: Non-json response More diagnostic information: x-ms-client-request-id is 'A09524C0-90E3-43A4-95AF-A3D493AACD2F'

Any reason why this is happening?