ServiceNowCredentialsValidation Error from Azure AD When Full Instance Hostname is EnteredIssue Azure AD Provisioning is configured in the portal.azure.com interface under Enterprise Applications->ServiceNow->Provisioning->Automatic. You'll be prompted to enter the Instancename, as well as the username and password of an admin user on the ServiceNow instance. See Step 5. of the Azure documentation: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/servicenow-provisioning-tutorial If you enter the instance name as instancename.service-now.com you'll get the error: You appear to have entered invalid credentials. Please confirm you are using the correct information for an administrative account.Error code: ServiceNowCredentialsValidationDetails: Your ServiceNow credentials are invalid. Please provide a current ServiceNow administrative user name and password along with the name of your ServiceNow instanceRequest-id: 8f4f371d-c53c-4bea-qw81-ne060b7hfcb1 CauseThe instance name should just be entered, not the full hostname. Azure AD will automatically append .service-now.com to whatever's entered for the instance name. If you enter the fullhostname (examplecompanyprod.service-now.com) Azure AD will not be able to connect to the instance, but will show the above-mentioned ServiceNowCredentialsValidation error, which can be misleading.Resolution Option 1: If your instance is called examplecompanyprod you should just enter examplecompanyprod without the .service-now.com suffix Option 2: For Custom URL and Regulated Markets when the instance suffix is not 'service-now.com' enter the full URL with https example: https://<instance>.servicenowcloud.com.au/ This is as per Microsoft document troubleshooting tips Provisioning requests are sent by default to https://{your-instance-name}.service-now.com/{table-name}. If you need a custom tenant URL, you can provide the entire URL as the instance name. https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/servicenow-provisioning-tutorial Note: Whitelisting Azure IPs at the ADCv2 is also required in Regulated Markets, customer would need to provide/confirm a list of Azure IPs. (Reference) Azure IP addresses https://www.microsoft.com/en-us/download/details.aspx?id=56519&WT.mc_id=rss_alldownloads_all Raise a CSTask with Network team to whitelist customer provided Azure IPs. If customer is having issue due to a new set of Azure IP(s) range that are not yet whitelisted, use the below to identify source IPs On-duty SRE Engineer or CS team can use the following dashboard in splunk to quickly find out the required IP to whitelist. Only accessible in SPP. https://splunk.irap.servicenow.net/en-US/app/search/spp_azure_access_to_customer