Solution Guide ios Managed Configuration Configuring and Delivering ServiceNow as a managed application to XenMobile Users with 3 rd Party SAML IDP (Identity Provider) Solution Guide 1
Introduction Organizations, large and small, leverage ServiceNow to manage incidents, collaborate with your team, respond to approval requests, and access the knowledge base. With the ever-growing Mobile Workspace access to this breakthrough productivity tools can now be protected for access from anywhere. With the power of the XenMobile and ServiceNow, you can manage incidents, collaborate with your team, respond to approval requests, and access the knowledge base, and receive push notifications all on the go with your mobile device. Purpose of this document This document is meant to guide administrators in configuring the below components; ServiceNow for SAML Single Sign-On (SSO) ServiceNow App Config via the XenMobile Console The uses case that will be addressed with in this document are; 1. SAML 2.0 authentication using username and password 2
Configure ServiceNow SAML 2.0 Setting for Single Sign-On Prerequisites 1. A ServiceNow Instance 2. An Identity Provider that Supports SAML 2.0 SAML 2.0 SSO Configuration ServiceNow SAML Configuration Guide Common IDP Configuration guides available here; Okta SAML 2.0 ServiceNow Configuration Azure AD SAML 2.0 ServiceNow Configuration OneLogin SAML 2.0 ServiceNow Configuration Centrify SAML 2.0 ServiceNow Configuration 3
ios Managed Application: ServiceNow via the XenMobile Console Add the ServiceNow App to the XenMobile Server Adding ServiceNow as a Managed App will allow for an App Configuration Policy with in the XenMobile server and allow for Apples platform MAM capabilities to be leveraged. Use the following procedure: 1. In the XenMobile console navigate to Configure > Apps and click the Add button. 2. Select Public App Store, name your App, assign is an app category and click Next. 3. We will be only configuring iphone and/or ipad, so you can uncheck any other options. 4. In the search bar type in ServiceNow and search, select the ServiceNow App and click Next. 5. Repeat the above step for selecting the ServiceNow app for ipads. 6. In the Approvals (optional), click Next. 7. Assign the application to a Delivery Group, this will assign the application as optional for the user and click Save. If you wish to have the ServiceNow Application assigned as a Required application, you will need to modify the assignment inside the delivery group? 4
ios Managed Configuration: ServiceNow via the XenMobile Console Prerequisites 1. The ServiceNow must be an MDM-managed application with in the XenMobile Server. Configure the ServiceNow App Config Policy The App Configuration Policy with in the XenMobile server will assign the customers Slack environment. Use the following procedure: 8. In the XenMobile console navigate to Configure > Device Policies and click the Add button. 9. Select App Configuration, name your policy and click Next. 10. We will be only configuring ios, so you can uncheck any other OS options. 11. In the Identifier drop down select the ServiceNow App ID (com.servicenow.servicenow) and select it. 12. If you do not see it, select Add New, and enter the Slack App ID (com.servicenow.servicenow) 13. In the Dictionary Content you will need to enter your desired application configurations. There are a number of Configuration options, see the sample below; 14. Click Next. <dict> <key>sndefaultinstanceurl</key><string>https://<instance name>.servicenow.com</string> </dict> 15. Assign the policy to the desired Delivery Group and Click Save. 5
ServiceNow App Configuration Key Definitions Key Description Default if the key-value pair is not configured SNDefaultInstanceURL The URL for the ServiceNow instance. https://<instance name>.service-now.com/ ServiceNow offers additional Mobile configuration for administrators; Configure the application menu Customize the mobile home screen Create a mobile theme Set up mobile lists Configure Connect Chat for mobile Additional details can be found at https://docs.servicenow.com/bundle/kingston-platform-userinterface/page/administer/tablet-mobile-ui/reference/setup-mobileadmin.html App Tunnel (per-app VPN) o o With the ios per app-vpn feature, you can leverage the VPN profile in conjunction with the Citrix VPN app on a XenMobile-managed ios device. There, you can establish an on-demand VPN tunnel to the enterprise network for a desired set of applications installed on the device. Per App VPN with XenMobile and Citrix VPN Blog Conclusion With the power of the XenMobile and ServiceNow, you can manage incidents, collaborate with your team, respond to approval requests, and access the knowledge base, and receive push notifications all on the go with your mobile device. 6
About the Authors and Contributors Frank Srp is a Senior Technical Marketing Manager specialized on Mobility, Citrix. Sujit Narayanan is a Principal Product Manager, Citrix. A special thanks to the reviewers of this Solutions Brief: Matthew Brooks Amandeep Nagra Tarkan Kocoglu Enterprise Sales North America 800-424-8749 Worldwide +1 408-790-8000 Locations Corporate Headquarters 851 Cypress Creek Road Fort Lauderdale, FL 33309, United States Silicon Valley 4988 Great America Parkway Santa Clara, CA 95054, United States 2017 Citrix Systems, Inc. All rights reserved. Citrix, the Citrix logo, and other marks appearing herein are property of Citrix Systems, Inc. and/or one or more of its subsidiaries, and may be registered with the U.S. Patent and Trademark Office and in other countries. All other marks are the property of their respective owner(s). 7