API Service Graph Connector for Apigee Edge — Setup Instructions<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } 1. Create a user account For the ServiceNow Service Graph Connector for Apigee Edge to securely integrate with your Apigee Edge organization, a dedicated user account should be created in that organization. This account is used by the connector to authenticate — the Apigee Edge equivalent of the "service account" used for Apigee X. Depending on your security configuration, this user might have access to all organizations you manage or a selected group. Follow the steps below to create a user account: Log in to the Apigee Edge Management UI (https://apigee.com/edge for Public Cloud, or your organization's own on-premises Edge management URL for Private Cloud).Navigate to Admin > Users within the target organization.Click + User and invite a new user (e.g. apigee-integration@example.com), or ask your Edge org administrator to create one for you. Alternatively, via the Management API: curl -H "Content-Type:application/json" \ -u orgadmin@example.com \ -X POST "https://api.enterprise.apigee.com/v1/o/ORG_NAME/users" \ -d '{"emailId":"apigee-integration@example.com","firstName":"SGC","lastName":"Integration"}' Note: for Private Cloud (on-premises) installations, replace apigee-integration@example.com with your organization's own Management API host. 2. Get Organization Name The Organization Name is the unique identifier for your Apigee Edge org — the Edge equivalent of the Project ID used for Apigee X. Note it down; you'll need it when configuring the connector. It's visible in the Edge UI (org switcher / URL), or retrievable via: curl -u apigee-integration@example.com "https://api.enterprise.apigee.com/v1/o/ORG_NAME" 3. Assign a role to the user account Assign the built-in Read-Only organization role (or an equivalent role with GET/list access to API proxies, proxy revisions, apiproducts, apps, deployments, developers, environments, and target servers) to the account created in step 1, so the connector can discover resources without any write access. Via UI: Admin > Users > select the user > Assign Role > Read-Only.Via Management API, add the user to the role at the org level. 4. Identify your OAuth Token URL Apigee Edge issues OAuth2 bearer tokens for Management API access. Unlike Apigee X (which uses a GCP service-account P12/JWT), Edge authenticates via a token endpoint that differs depending on how your Edge organization is hosted: Public Cloud (SaaS): the default token endpoint is https://login.apigee.com/oauth/token. If your organization has SAML enabled, use https://zone.login.apigee.com/oauth/token instead.Private Cloud (on-premises): the token endpoint is a custom URL hosted on your own management server (not login.apigee.com). Confirm the exact host and port with your Apigee Edge on-premises administrator — this is required for the connector to be configured correctly. Also confirm the Client ID / Client Secret for the token endpoint: the Public Cloud default is edgecli/edgeclisecret, but Private Cloud installations may have a custom client ID/secret configured by your org admin. Obtain these from your Edge administrator if they differ from the default. 5. Registering credentials in ServiceNow instance for Service Graph Connector for Apigee Edge In the connector's connection/credential alias in your ServiceNow instance, provide: Organization Name (from step 2)Username / Password of the integration user account (from step 1)OAuth Token URL — the cloud or on-premises endpoint identified in step 4Client ID / Client Secret — default or custom, as identified in step 4 The connector handles token acquisition and refresh internally once these values are registered; no manual token generation is required from you. Apigee Edge Documentation Link