ms.date | title | ms.author | author | manager | audience | ms.audience | ms.topic | ms.service | ms.localizationpriority | search.appverid | description | |||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
10/08/2019 |
Troubleshooting guide for ServiceNow Tickets Microsoft Graph connector |
souravpoddar |
souravpoddar001 |
harshkum |
Admin |
Admin |
article |
mssearch |
medium |
|
Troubleshoot issues with the ServiceNow Tickets Graph connector for Microsoft Search and Copilot. |
If your organization has enabled single sign-On (SSO) to ServiceNow, you may have trouble logging in with the service account. You can bring up username and password based login by adding login.do
to the ServiceNow instance URL. Example. https://<your-organization-domain>.service-now.com./login.do
If you see forbidden or unauthorized response in connection status, check if the service account has required access to the tables mentioned in step 3: connection settings. Check whether all the columns in the tables have read access.
The Microsoft Graph connector uses access token fetched on behalf of service account for crawl. The access token refreshes every 12 hours. Ensure that service account password isn't changed after publishing the connection. You may need to reauthenticate the connection if there's a change in password.
The Microsoft Graph Connector may not be able to reach your ServiceNow instance if it is behind a network firewall. You'll need to explicitly allow access to connector service. You can find public IP address range of connector service in the table below. Based on your tenant region, add it to your ServiceNow instance network allowlist.
Environment | Region | Range |
---|---|---|
PROD | North America | 52.250.92.252/30, 52.224.250.216/30 |
PROD | Europe | 20.54.41.208/30, 51.105.159.88/30 |
PROD | Asia Pacific | 52.139.188.212/30, 20.43.146.44/30 |
If you observe discrepancies in access permissions applied to search results, verify whether the search user is part of assigned_to
and opened_by
fields.
ServiceNow user accounts that don't have a Microsoft 365 user in Microsoft Entra ID won't map. Non-user, service accounts are expected to fail user mapping. Number of user mapping failures can be accessed in identity stats area in connection detail window. Log of failed user mappings can be downloaded from Error tab.
If you have any other issues or want to provide feedback, write to us aka.ms/TalkToGraphConnectors.