MID Server not able to connect to instance - WS-Security header error

Mid-server not able to connect to instance - WS-Security header error 

 

Overview

---

ServiceNow offers the capability of enabling WS-Security header verification for all incoming SOAP requests. It is commonly used by administrators who want to:

When enabling this system property, it is important to exclude service accounts from the WSS authentication requirement. Due to technical limitations, service accounts responsible for integrations cannot make use of WSS. One very common error that might occur after enabling the security setting is that the MID Server(s) stops working.

When inspecting the log files for the MID Server, you might see errors such as this:

MIDServer WARNING *** WARNING *** Method failed: (https://instancename.service-now.com/ecc_agent.do?SOAP&displayvalue=all&redirectSupported=true)HTTP/1.1 500 Internal Server Error with code: 500

MIDServer SEVERE *** ERROR *** getRecords failed (An error was discovered processing the WS-Security header No certificate(s) found in WS-Security profile)

 

StartupSequencer WARNING *** WARNING *** SOAP server error reported by ServiceNow instance, user 'Your-MID-Account' may be missing the 'soap_script' role

The MID Server service might show that it is running correctly and you are able to restart the service. However, the instance does not acknowledge the connection and shows a status of down. 

 

Solution

---

Administrators might forget that the MID Server user is also considered a service account. Therefore, it must also be excluded from the WSS security settings by making it an Internal Integration User. To do so, please follow these steps:

1. Navigate to User Administration > Users and locate the MID Server user
2. Select the MID server user and right click on the header to personalize the form.
3. Add the Internal Integration User field from the left slushbucket.
4. Reload the form.
5. Select the Internal Integration User option.
6. Update the user record.

Ensure that the MID Server user is configured correctly in compliance with the newly added security setting. The error messages should be resolved.