;}%20.st6{fill:url(%23SVGID_00000021089067129159788970000008246765442136188072_);}%20.st7{fill:url(%23SVGID_00000117639240116366130650000015074833605515028638_);}%20.st8{opacity:0.4;fill:url(%23SVGID_00000101781798616409025840000016567063639337360777_);}%20.st9{opacity:0.4;fill:url(%23SVGID_00000052086836598721292040000002033117744178971046_);}%20.st10{opacity:0.4;fill:url(%23SVGID_00000159460939004760751800000002448009281983951536_);}%20.st11{opacity:0.4;fill:url(%23SVGID_00000013177830667419993080000017721442101626521532_);}%20.st12{opacity:0.4;fill:url(%23SVGID_00000152235521444854938490000006526001119318383285_);}%20.st13{opacity:0.4;fill:url(%23SVGID_00000119823135212293698520000012774889010992664993_);}%20%3c/style%3e%3cg%3e%3cpolygon%20class='st2'%20points='134.78,14.22%20114.31,48.21%20101.33,69.75%20158.22,69.75%20177.97,36.95%20191.67,14.22%20'/%3e%3cpolygon%20class='st3'%20points='227.55,69.75%20186.61,69.75%20101.33,69.75%20129.78,119.02%20158.16,119.02%20228.61,119.02%20256,119.02%20'/%3e%3cpolygon%20class='st3'%20points='136.93,132.47%20116.46,167.93%2073.82,241.78%20130.71,241.78%20144.9,217.2%20180.13,156.18%20193.82,132.46%20'/%3e%3cpolygon%20class='st3'%20points='121.7,131.95%20101.23,96.49%2058.59,22.63%2030.15,71.91%2044.34,96.49%2079.57,157.5%2093.26,181.22%20'/%3e%3cpolygon%20class='st2'%20points='64.81,131.95%2025.15,131.21%200,130.74%2028.44,180.01%2066.73,180.72%2093.26,181.21%20'/%3e%3cpolygon%20class='st2'%20points='165.38,181.74%20184.58,216.46%20196.75,238.47%20225.19,189.2%20206.66,155.69%20193.83,132.46%20'/%3e%3c/g%3e%3c/svg%3e)
Windmill HubServiceNow
Support OAuth (client credentials or sign-in), or username and passwordRead and update ServiceNow incidents, requests and any table record from any Windmill script, flow or app.
Set up in 4 steps
Create an OAuth client in ServiceNow
A ServiceNow admin registers an OAuth API endpoint for external clients (System OAuth, Application Registry) and sets its OAuth Application User. Client credentials also need the system property glide.oauth.inbound.client.credential.grant_type.enabled set to true. Scripts using client credentials act as that user, so give it only the roles they need.
Connect as the service user
Under Others in the Add a resource dialog, pick servicenow and enter the instance name (dev12345) and the client id and secret. No Windmill admin is needed; use this lane for shared and scheduled flows.
Or share one service account from the instance
The Windmill instance admin adds ServiceNow under Instance settings → Authentication → OAuth with that client id and secret and the instance name, and picks Client credentials (or Both) under These credentials are for. Users then pick ServiceNow under Instance-configured OAuth APIs and click Connect without entering an id or secret, which stays on the Windmill server. Every read-write member of every workspace on the Windmill instance can connect this way.
Or sign in as yourself
To act as each person, the Windmill instance admin adds ServiceNow (instance name, client id and secret, Authorization code or Both) under Instance settings → Authentication → OAuth. Users then click Connect under Instance-configured OAuth APIs; one Windmill instance signs in to one ServiceNow instance.
Scripts
Building blocks, if none of the projects above fit. Fork one, run it, or call it as a step inside your own flow.
Update change request
Get change next states
Create incident
Create change request
Close change request
New or Updated Record
Upload Attachment
Update Record
List Tables
List Records
List Attachments
Insert Into Import Set
Get Record
Get Import Set Result
Get Current User
Download Attachment
Delete Record
Delete Attachment
Create Record
Aggregate Records
Trigger flows from ServiceNow
ServiceNow is not only a destination. These inbound paths are supported today.
New or updated record (scheduled poll)
The New or Updated Record trigger script polls one table and returns the records created or updated since its last run. To run it, open a flow, add a trigger and choose Scheduled Poll, then pick the trigger script and an interval. The steps after it run once per new item, and each flow keeps its own cursor.
Resource type
The shape of the credential every script on this page expects.
servicenow
View raw schema →| Field | Type | Required | What it is |
|---|---|---|---|
| instance_url | string | Yes | Instance base URL, e.g. https://dev12345.service-now.com (no trailing slash). Every REST call is made against this host. |
| username | string | No | Basic auth username. Leave blank when using an OAuth bearer token. |
| password | string | No | Basic auth password. Leave blank when using an OAuth bearer token. |
| token | string | No | OAuth 2.0 access token (Bearer). Populated automatically when you connect with OAuth (client credentials under Others, or sign-in once the instance admin configures ServiceNow in instance settings), or paste one manually. Provide this instead of username/password to authenticate with OAuth. |
Questions
Token or username and password?
Either. The scripts send the token when the resource has one, and Basic auth otherwise.
A record is not visible
ServiceNow filters every table by the caller's roles, so a missing record is usually an ACL rather than a wrong id.
There is no Connect button on my instance
Signing in as yourself, or the shared service account, needs the Windmill instance admin to configure ServiceNow first. Your own client credentials under Others, or a username and password, need no admin.
Are my credentials stored on the hub?
Never. They live only in your own Windmill workspace, encrypted at rest.