# Connect Azure Active Directory to ServiceNow > Sync user identities, automate provisioning workflows, and cut out manual ticket creation between Azure AD and ServiceNow. **Canonical page:** https://tray.ai/connectors/azure-active-directory-servicenow-integrations/ **Azure Active Directory connector:** https://tray.ai/connectors/azure-active-directory-integrations/ **Azure Active Directory documentation:** https://tray.ai/documentation/connectors/service/azure-active-directory **ServiceNow connector:** https://tray.ai/connectors/servicenow-integrations/ **ServiceNow documentation:** https://tray.ai/documentation/connectors/service/servicenow ## Overview Azure Active Directory and ServiceNow are two of the most important platforms in any enterprise IT stack — one handles identity and access, the other manages IT services and workflows. When they run in silos, IT teams burn hours manually creating tickets, provisioning users, and reconciling account data. Connecting Azure AD with ServiceNow through tray.ai gives you real-time identity sync, automated ITSM workflows, and faster incident response across the full employee lifecycle. Most enterprises use Azure Active Directory to manage user identities, groups, and access policies, and ServiceNow to handle IT service delivery, change management, and HR workflows. When those platforms aren't connected, onboarding a new employee piles up manual steps across both systems, access changes go untracked in ticketing, and security teams have no unified view of identity events. Integrating Azure AD with ServiceNow on tray.ai lets you automatically trigger ServiceNow tickets when Azure AD events fire — user creation, group changes, account deactivation — so every identity change is fully auditable inside your ITSM workflows. You get shorter time-to-provision, a cleaner compliance posture, and IT teams who aren't stuck doing repetitive data entry. ## Use cases ### Automated User Onboarding and Provisioning When a new user is created in Azure Active Directory — manually or synced from an HR system — tray.ai automatically triggers a ServiceNow onboarding request that routes to the right IT and facilities teams. All provisioning tasks, asset assignments, and software access approvals are created as structured workflow items in ServiceNow with no manual intervention. - Cut onboarding time from days to hours by eliminating manual ticket creation - Give every new hire a consistent, auditable set of provisioning tasks in ServiceNow - Automatically assign tickets to the correct IT queues based on department or location from Azure AD attributes ### Automated Offboarding and Account Deprovisioning When an employee is disabled or deleted in Azure Active Directory, tray.ai immediately creates a ServiceNow offboarding ticket and kicks off downstream deprovisioning — license revocation, group membership cleanup, and asset return requests. No access lingers past an employee's last day, and every action is logged in ServiceNow for audit purposes. - Eliminate security risks from orphaned accounts that stay active after offboarding - Keep a complete, auditable offboarding trail in ServiceNow tied to the Azure AD event - Automatically route hardware recovery and license reclamation tasks to the right teams ### IT Incident Creation from Azure AD Security Alerts When Azure Active Directory raises a security alert — a sign-in risk event, suspicious activity, or MFA failure threshold — tray.ai automatically creates a high-priority incident in ServiceNow and routes it to the security operations team. The incident arrives pre-populated with user details, risk level, and event context pulled directly from Azure AD. - Speed up incident response by cutting out manual triage and ticket creation - Make sure security events are never lost between Azure AD and your ITSM queue - Pre-populate ServiceNow incidents with Azure AD context so analysts can move faster ### Group Membership Change Auditing and Ticket Logging Any time a user is added to or removed from a security or distribution group in Azure Active Directory, tray.ai automatically logs a change record in ServiceNow. This gives you a full audit trail of access changes inside the ITSM system and can trigger approval workflows for sensitive groups. - Keep a compliance-ready audit log of all Azure AD group changes inside ServiceNow - Automatically enforce approval workflows before users gain access to sensitive Azure AD groups - Reduce manual effort for access review and recertification cycles ### Password Reset and Self-Service Request Synchronization When a user submits a password reset request via the ServiceNow service portal, tray.ai triggers the appropriate Azure Active Directory password reset or unlock operation automatically. Status updates are written back to the ServiceNow ticket in real time, so users and IT staff both know what's happening without leaving either platform. - Let users reset passwords through the service portal without IT touching Azure AD manually - Cut help desk call volume by fully automating Level 1 password reset workflows - Show real-time ticket status updates as Azure AD operations complete ### Role-Based Access Request Fulfillment When a user submits an access request through the ServiceNow catalog, tray.ai evaluates it against Azure AD policies and, once approved, automatically provisions the correct group memberships, roles, or conditional access assignments. The ServiceNow ticket gets updated with fulfillment confirmation and audit details. - Connect ServiceNow's approval workflows directly to Azure AD provisioning actions - Remove manual handoffs between service desk agents and identity administrators - Ensure access is only granted after proper approvals are captured in ServiceNow ### License Optimization and Unused Account Reporting tray.ai periodically queries Azure Active Directory for inactive or disabled accounts and cross-references them with open ServiceNow assets or license assignments. Automated cleanup tickets are created in ServiceNow, so IT teams can reclaim unused licenses and cut SaaS spend without running manual audits. - Surface unused Azure AD accounts as actionable ServiceNow tickets automatically - Reduce SaaS license waste by connecting identity data with asset and license management - Schedule recurring audits without manual reporting effort from IT administrators ## Templates ### New Azure AD User → ServiceNow Onboarding Request Automatically creates a structured ServiceNow onboarding request whenever a new user account is provisioned in Azure Active Directory, populating all relevant user attributes and routing the ticket to the correct IT queue. Connectors used: Azure Active Directory, ServiceNow ### Azure AD User Disabled → ServiceNow Offboarding Workflow When an account is disabled in Azure Active Directory, this template instantly creates a ServiceNow offboarding ticket, triggers group membership removal, and kicks off asset recovery and license revocation sub-tasks. Connectors used: Azure Active Directory, ServiceNow ### ServiceNow Access Request → Azure AD Group Provisioning When a user submits an access request in the ServiceNow service catalog and it gets manager approval, tray.ai automatically adds the user to the specified Azure AD group or role and updates the ticket with fulfillment details. Connectors used: ServiceNow, Azure Active Directory ### Azure AD Security Alert → ServiceNow High-Priority Incident Monitors Azure Active Directory for risk detections and security alerts, then automatically creates a high-priority ServiceNow incident pre-populated with user risk details, alert type, and recommended remediation steps. Connectors used: Azure Active Directory, ServiceNow ### ServiceNow Password Reset Request → Azure AD Self-Service Reset Bridges the ServiceNow service portal with Azure Active Directory password operations, automatically executing resets or account unlocks when a verified request comes in and writing status back to the ticket. Connectors used: ServiceNow, Azure Active Directory ### Scheduled Azure AD Inactive Account Audit → ServiceNow Cleanup Tickets Runs on a defined schedule to query Azure Active Directory for accounts inactive beyond a set threshold, then creates ServiceNow tickets for IT review and potential deprovisioning to control licensing costs and reduce security exposure. Connectors used: Azure Active Directory, ServiceNow ## Challenges Tray.ai solves ### Keeping User Data Consistent Across Both Platforms Azure Active Directory and ServiceNow store overlapping user attributes — display names, departments, job titles, manager relationships — but there's no native real-time sync between them. When an HR system updates Azure AD, ServiceNow records can go stale fast, causing tickets to route incorrectly and reports to reflect outdated data. **How Tray.ai helps:** tray.ai detects attribute changes in Azure Active Directory in real time and immediately pushes updates to the corresponding ServiceNow user record, keeping both platforms in sync without custom scripting or manual reconciliation. Field mapping is fully configurable to match your organization's schema. ### Handling Complex Approval Chains Before Provisioning Enterprise access requests often need sign-off from managers, security teams, and application owners before any Azure AD changes can be made. Coordinating those approvals across email and ServiceNow while triggering timely Azure AD actions is slow and error-prone when done by hand. **How Tray.ai helps:** tray.ai orchestrates the entire approval lifecycle within ServiceNow — collecting approvals at each stage, applying conditional logic based on access sensitivity, and only executing the Azure AD provisioning action once all required approvals are captured and logged. ### Mapping Azure AD Attributes to ServiceNow Ticket Fields Azure Active Directory and ServiceNow use different data models, naming conventions, and field structures. Transforming Azure AD user objects, group memberships, and security events into properly formatted ServiceNow records takes careful field mapping that gets harder to maintain every time either system changes. **How Tray.ai helps:** tray.ai's visual data mapper lets teams define and maintain field-level transformations between Azure AD and ServiceNow without writing code. Conditional logic can be applied at the field level to handle edge cases like null values, department name mismatches, or custom attributes. ### Managing High-Volume Identity Events Without Overloading ServiceNow In large enterprises, Azure Active Directory can generate thousands of group membership changes, sign-in events, and user updates per day. Pushing every event into ServiceNow as its own ticket would bury actionable items in noise and overwhelm ITSM queues. **How Tray.ai helps:** tray.ai has built-in filtering, deduplication, and batching logic so only meaningful Azure AD events trigger ServiceNow actions. Thresholds, event type filters, and aggregation windows are all configurable, so ServiceNow only receives high-signal, actionable items. ### Maintaining Audit Compliance Across Identity and ITSM Systems Compliance frameworks like SOC 2, ISO 27001, and HIPAA require proof that every access change has a corresponding approval and ticket trail. Without integration, reconciling Azure AD audit logs with ServiceNow change records is a slow manual process — and gaps tend to show up at the worst possible moment, like during an audit. **How Tray.ai helps:** tray.ai ensures every identity operation in Azure Active Directory is preceded and followed by a corresponding ServiceNow record, creating an unbroken audit chain. Workflow run logs within tray.ai add another layer of documentation that can be exported for compliance reviews. ## Learn more - Intelligent Integration: https://tray.ai/platform/intelligent-ipaas/ - Merlin Agent Builder: https://tray.ai/platform/merlin-agent-builder/ - Agent Gateway for MCP: https://tray.ai/platform/agent-gateway/ - Book a demo: https://tray.ai/contact/