Integrating your Software Asset Management application with the Dropbox service enables you to track your software subscriptions and to reclaim unused licenses.

For more information about the Dropbox service, see the Dropbox Business User and Admin Guides.

Important: Minimize security risks and protect information by granting access only to the necessary user or API permissions.
Table 1. Minimal user permissions
Process Required user role in the Dropbox application Authentication scopes
Download subscriptions Security Admin
  • members.read
  • team_data.member
Pull user activity Security Admin
  • events.read
  • team_data.member
Reclaim subscription Security Admin
  • team_info.read
  • members.write
  • members.delete

Create a Dropbox application for user subscriptions

Create an application on the DBX Platform for Developers.

Before you begin

Dropbox Role required: Refer to the Minimal user permissions table.

Procedure

  1. Navigate to Dropbox Developer Apps and sign in to your account.
  2. On the My Apps page, select Create App.
  3. Select scoped access API.
  4. Specify the type of access to Full Dropbox.
  5. Enter a name for your application and select Create app.
  6. Select the Permission tab.
  7. Select these permission check boxes:
    • team_info.read
    • members.write
    • members.delete
    • groups.read
    • events.read
    • team_data.member
  8. Select Submit to save the changes.
  9. Navigate to the Settings tab.
  10. Obtain the App key and App secret.
    You will need to copy and paste these values into the Client ID and Client Secret fields in your ServiceNow instance in the following steps.
    Note: Your App key (client ID) and App secret (client secret) are sensitive. Do not share them.
  11. Enter https://instance.service-now.com/oauth_redirect.do as the redirect URI, where instance is the name of your ServiceNow instance.
  12. Click the Branding tab and then click Save changes.

Create a Dropbox integration profile

Create an integration profile to track software subscriptions and optimize licensing for the Dropbox service.

Before you begin

To create a Dropbox integration profile, request the Software Asset Management - SaaS License Management plugin (sn_sam_saas_int) from the ServiceNow Store.

ServiceNow Role required: sam_integrator or admin

About this task

If you’re using Software Asset Workspace, the option to create the Dropbox integration profile in Core UI is inactive.

Procedure

  1. Using the information from the application with the permissions set to Team member file access, return to your ServiceNow instance to create an integration profile.
  2. Navigate to the integration profile.
    InterfaceAction
    Core UI
    1. Navigate to All > Software Asset > SaaS License > Direct Integration Profiles.
    2. Select New.
    3. Select Dropbox Integration Profile.
    Software Asset Workspace
    1. Navigate to License operations > User Subscriptions > Direct integration profiles.
    2. Select New.
    3. Select Dropbox from the drop-down list.
    4. Select Continue.
  3. On the form, fill in the fields.
    Table 2. Integration Profile form
    FieldValue
    Display name Name of the integration profile. For example, DropBox Integration
    Client Id Client ID for the OAuth application created in the SaaS admin account.
    Redirect url URL of the OAuth provider that you're redirected to after authentication. This value is automatically populated.
    Client secret Password associated with the client ID.
    Profile type Type of integration profile. This value is automatically set to DropBox Subscription.
    Analyze user activity from
    In the Analyze user activity field, you can also select the date and time starting from when you want to analyze the user activity. By default, you can analyze user activity up to 60 days prior to the current date and view events performed by individual users from the time you create this profile.
    Note: Software Asset Management pulls the events from the time that you start analyzing user activity irrespective of the profile creation date.
    You can modify this value in the Last activity threshold field of your software reclamation rules. For more information, see Review a software reclamation rule.
  4. In the Process configuration section, review the required user roles or API permissions specified in the Vendor configuration field for each process to minimize security risks and optimize SaaS licenses.
    Note: For more information about the required roles and scopes, see Minimal user permissions table.

    • The Download subscriptions check box is selected by default and you can't clear it.

    • The Download Activity check box is selected by default. If you clear it, the activity scheduled job SAM - Refresh <displayname> Events isn't created.

      In the Analyze user activity field, you can also select the date and time starting from when you want to analyze the user activity. By default, you can analyze user activity up to 60 days prior to the current date and view events performed by individual users from the time you create this profile.
      Note: Software Asset Management pulls the events from the time that you start analyzing user activity irrespective of the profile creation date.
      You can modify this value in the Last activity threshold field of your software reclamation rules. For more information, see Review a software reclamation rule.

    • The Reclaim subscriptions check box is selected by default. If you don't want to reclaim subscriptions, you can clear this check box. If you clear it, the removal candidates are created but the reclaim subscription subflow isn't triggered or the reclamation process isn't initiated.

  5. Select Submit after completing all the required fields.
    Your ServiceNow instance creates a draft integration profile.
  6. On the integration profile form, select Get OAuth Token.
    Note: For the role required to perform this step, refer to the Minimal user permissions table.
  7. Navigate to the Dropbox application.
    • Select Allow if you have already logged in to the Dropbox application.
    • If you haven't logged in to the Dropbox application, log in with your admin credentials and then continue with the next steps.
    Note: When user subscriptions are reclaimed, files from the reclaimed accounts are transferred to the admin account selected in this step. This account can be a different admin account than the one used to set up the integration. If you have to start transferring files to a new admin, you can select the Get OAuth Token related link again at any time to select a different admin account. After selecting a new admin, you can reclaim the old admin account to transfer all of their files to the new admin, including all previously reclaimed user files.
  8. On the integration profile form, select Validate Connection to verify the connection and credential details of this integration.

    Validating the connection verifies the Download Subscriptions and Calculate Activity APIs, but not the Reclaim Subscriptions APIs.

    Note: If you clear the Download Activity check box after the integration profile is validated and scheduled jobs are created, you must revalidate the connections because the following events occur:
    • The Status field on the integration profile form changes to Draft.
    • The Validate connection button shows up on the form.
    • The current SAM - Refresh <displayname> Events job gets deleted.

What to do next

After the integration connects, your ServiceNow instance automatically creates software models, reclamation rules, and software subscriptions that are refreshed daily.

If you want to set up multiple integration profiles with unique connections, create child aliases to manage different configurations and settings for each integration profile. For more information, see Create a child alias to set up multiple integration profiles.

Review all automatically generated reclamation rules to reclaim user subscriptions. For more information, see Review a software reclamation rule.

Create software entitlements for the automatically generated software models to track used software against owned software.
Reconciliation also runs on your subscriptions as a scheduled job or on-demand. You can view your reconciliation results in the License Workbench (Software Asset Management classic application) or the License usage view (Software Asset Workspace). Use these results to determine your license compliance position and to remediate any non-compliance.