Frame + ServiceNow Step-by-Step Integration!
Nutanix and ServiceNow have built a strong partnership over the years, and the collaboration continues as we look to deliver even more benefits for our mutual customers! One example of this is to see just how easy it is to integrate the Nutanix Frame Desktop-as-a-Service with the ServiceNow workflow solution to easily onboard and provision apps and desktops to new users!
![](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e59/66166ff6fa4f87b1808e6c23_Group%20352-min.webp)
WRITTEN BY
TABLE OF CONTENT
Prerequisites
- Third-Party Identity Provider (supported by Nutanix Frame and ServiceNow) Note: For the purposes of this demo, we will be leveraging Okta as our Identity Provider - but you can use your supported identity provider of choice in a very similar approach.
- Install and configure the Okta Spoke within your ServiceNow instance (requires an IntegrationHub subscription). Detailed instructions available here.
- Nutanix Frame Subscription with one or more Organizations, Accounts, and Launchpads configured.
![Okta Spoke in ServiceNow Store](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc495e2648e9cc54057_image1-d8d5b8fc6e71354c1faef6ee65cc2841.png)
Summary
In this demo, we have created two separate Frame Accounts for our users that belong to the same Frame Organization called SNOW:
![Account List](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc4f191f74198ea68fd_image2-311cd0b0d5acf927e3c6c560db949457.png)
- Engineering - This Account is hosted in AWS Ohio and provides a persistent desktop (Windows Server 2019 with AMD GPU) to Engineering users. We have also created a single Launchpad called Engineering Desktop within this Account.
- Marketing - This Account is hosted in Azure North Central and provides a non-persistent desktop (Windows 10 with no GPU) to Marketing users. We have also created a single Launchpad called Marketing Desktop within this Account.
We would now like to manage user access to these Accounts (via their respective Launchpads) via ServiceNow.
Configuration
Step 1. [Okta] Create your desired User Groups within Okta. For the purposes of this demo, we created two groups:
- Frame Engineering (frame-snow-engineering)
- Frame Marketing (frame-snow-marketing)
Step 2. [ServiceNow] Within ServiceNow, browse to Okta Spoke → Okta Groups and click on Fetch Okta Groups. Available Okta Groups should populate automatically.
![Okta Groups in ServiceNow Okta Spoke](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc4106749662ff7e211_image3-6225db8b58db74addf1ea0241bf926ee.png)
Step 3. [ServiceNow] For any Okta Groups that you want to manage via ServiceNow will need to have a corresponding ServiceNow Group created within User and Groups → Groups.
![Created Frame Engineering and Frame Marketing ServiceNow Groups](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc4e2467a59e16522af_image4-a3bb4b440004e4fd63d557d22d939f8b.png)
Step 4. [Nutanix Frame] Add your Okta instance as SAML2 Provider at the desired hierarchy level (Customer, Organization, or Account) within your Frame tenant. For detailed instructions for integrating Okta with Frame, click here.
![Okta instance added as a SAML2 Provider within Frame](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc4c33022d3b16efffd_image5-37a9784648549925fa214343fe6b1d40.png)
Step 5. [Nutanix Frame] Add the appropriate SAML2 Permission Rule for the Engineering Account (Account Dashboard → Users → SAML2 Permissions → Add Permission) by specifying the frame-snow-engineering Okta group and granting that group the Launchpad User Role to the Engineering Desktop Launchpad.
![Frame SAML2 Permission Rule for Engineering](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc472ef7303e9fe9f34_image6-14caf27ddb47bd89dcfe4d8536e90b6e.png)
Step 6. [Nutanix Frame] Add the appropriate SAML2 Permission Rule for the Marketing Account (Account Dashboard → Users → SAML2 Permissions → Add Permission) by specifying the frame-snow-marketing Okta group and granting that group the Launchpad User Role to the Marketing Desktop Launchpad.
![Frame SAML2 Permission Rule for Marketing](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc4eef8fec0a8af568b_image7-88a1728b8978db72feeb84cdca688907.png)
Demo
Now that we have everything configured, we are ready to begin provisioning user access to Frame using ServiceNow!
Lucky for us, we just so happen to have two new hires we need to onboard!
- John Smith (john.smith@fra.me) - A new member of the Engineering team.
- Jane Miller (jane.miller@fra.me) - A new member of the Marketing team.
To do so, we need to first create the above User accounts within Okta and then do the same within ServiceNow (ensuring emails match).
Step 1. [ServiceNow] Create User for John Smith and then associate the User to the frame-snow-engineering Group.
![Creating User Account for John Smith](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc48f715c63bc089d38_image8-bc6eee2a6db3c6b75ebd645e9f0158a0.png)
![Adding John Smith to the frame-snow-engineering Group](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc4bda46d43220dbd6c_image9-b28ca45fea354c5fae06badebe8467d0.png)
You can also check in Okta and verify that the user was added to the right group:
![Okta also shows John Smith was added to the frame-snow-engineering Okta Group](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc449f88ea06d7750f2_image10-1143dadff975cd4d03547f71fc1b5c4f.png)
Step 2. [ServiceNow] Create User for Jane Miller and then associate the User to the frame-snow-marketing Group.
![Creating User Account for Jane Miller](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc43f601013004467da_image11-c2b3630e1dff3efb7681ea37f2d312d5.png)
Step 3. [Nutanix Frame] Login to Frame with John Smith via Okta and confirm he has access to the Engineering Desktop.
![Click Sign in with frame-snow-test](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc448fd45ca52bf251b_image13-42781373f28861e345c9cce1c08604e4.png)
![Enter John Smith's Okta credentials](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc4bfa2c5d01bf10a0d_image14-3f371264dc48d2490ffedf2cc89a9282.png)
![Looks like the Engineering Desktop is available for John to access!](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc439b52ef65be8d930_image15-299fef9ff4a7c85236141522fa904221.png)
Step 4. [Nutanix Frame] And finally, we will login to Frame with Jane Miller via Okta and confirm she has access to the Marketing Desktop.
![Click Sign in with frame-snow-test](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc448fd45ca52bf251b_image13-42781373f28861e345c9cce1c08604e4.png)
![Enter Jane Miller's Okta credentials](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc41d0075ddcada08b8_image16-b51384b7449c135b8233709074eb4526.png)
![And the Marketing Desktop is available for Jane to access](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc404a11e2ae64bac63_image17-b1e50eff1b8f5b1c3a69414678dd4282.png)
![Adding Jane Miller to the frame-snow-marketing Group](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e84/66461bc44f7a7609e35a9bfe_image12-f4ac59fb515e410d116a8678f740734e.png)
And that's it!
Now let's verify if John and Jane have access to their proper desktops within Frame.
Conclusion
As you can see, with Frame, and your identity provider of choice, you can quickly and easily streamline the process of onboarding (and offboarding) users and ensure they have access to the proper desktops and apps all through the convenience of ServiceNow!
Subscribe to our newsletter
Register for our newsletter now to unlock the full potential of Dizzion's Resource Library. Don't miss out on the latest industry insights – sign up today!
![](https://cdn.prod.website-files.com/653fe79c68bb383bddf27e59/6618fa27a818a760b7a3bd84_%5Basset%5D%20Newsletter-min.webp)
Dizzion values your privacy. By clicking on the submit button, you agree to the processing of your personal data in the manner indicated in the Dizzion Privacy Policy and consent to receive communications from Dizzion about our products, services, and events.