Integrate with SaaS applications › SaaS License Management › Software Asset Management › IT Asset Management › Asset Management

Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Integrating with Looker

Integrating your Software Asset Management application with Looker, a Google Cloud application that enables you to track your software subscriptions and to reclaim unused licenses.

Important: Minimize security risks and protect information by granting access only to the necessary user or API permissions.

Process	Required user role in the Box application	Authentication scopes
Download subscriptions	User with see_users permission	None
Pull user activity	User with see_users permission	None
Reclaim subscription	admin	None

Configure Looker API key settings

Configure API key settings to manage and retrieve Looker API keys.

Before you begin

Looker Role required: admin

Procedure

Log in to your Looker (https://<instancename>.looker.com/) instance.
Select the gear icon to open Admin settings.
Select Users > Open the admin user account.
Select Edit API3 Keys under the Profile tab.
Select New API3 Key.
Copy the Client ID and Client secret for later use.

Create a Looker integration profile

Create a Looker integration profile to track software subscriptions and optimize licensing for your Looker solutions.

Before you begin

The Software Asset Management - SaaS License Management plugin (sn_sam_saas_int) must be installed from the ServiceNow Store.

ServiceNow Role required: sam_integrator

Important: You must select the Looker Spoke check box for this integration while installing optional features on the Application Manager page. For more information about choosing the required SaaS applications, see Request SaaS License Management.

About this task

If you’re using Software Asset Workspace, the option to create the Looker integration profile in Core UI is inactive.

Procedure

Navigate to the integration profile.

Interface	Action
Core UI	Navigate to All > Software Asset > SaaS License > Direct Integration Profiles. Select New. Select Looker Integration Profile.
Software Asset Workspace	Navigate to License operations > User Subscriptions > Direct integration profiles. Select New. Select Looker from the drop-down list. Select Continue.

On the form, fill in the fields.

Field	Value
Display name	Name of the integration profile. For example, Looker integration.
Status	Status of the integration profile. - If you have not published the integration profile, this field is automatically set to  Draft. - If you have already published the integration profile, this field is automatically set to  Published.
Profile type	Type of integration profile. This field is automatically set to Looker Subscription.

Review the required user roles or API permissions specified in the Vendor configuration field for each process to minimize security risks and optimize SaaS licenses.

Note: For more information, see Minimal user permissions table.
1. In the Download Subscription Subflow section, verify that the Subflow field is set to Looker Download Subscriptions.
  
  Note: The Download subscriptions check box is selected by default and you can't clear it.
2. In the Reclaim Subscription Subflow section, verify that the Subflow field is set to Looker Reclaim Subscription.
  
  Note: The Reclaim subscriptions check box is selected by default. If you don't want to reclaim subscriptions, you can clear this check box. If you clear it, the removal candidates are created but the reclaim subscription subflow isn't triggered or the reclamation process isn't initiated.
Select Save.

A draft integration profile is created.

The Connection & Credential field appears and is automatically set to sn_looker_spoke.Looker.
Open the connection & credential aliases record by selecting the preview icon

Image omitted: preview-icon.png
No alternative text supplied

next to the Connection & Credential field and then selecting Open Record in the record preview.

On the Connection & Credential Aliases form, select the Create New Connection & Credential related link.

In the Create Connection and Credential dialog box, fill in the fields.

Field	Description
Connection Information
Connection Name	Name of the Looker connection. This field populates automatically.
Connection URL	Looker base URL for the API. This field is automatically set to `https://<instance_name>.looker.com`.
Credential Information
OAuth Client ID	Client ID that is assigned to your Looker application.
OAuth Client Secret	Client secret that is assigned to your Looker application.
OAuth Redirect URL	`https://<instance name>/oauth_redirect.do`, where instance name is the name of your ServiceNow instance.

Select Create and Get OAuth Token.

Note: For the role required to perform this step, refer to the Minimal user permissions table.

The dialog box closes and you automatically return to the integration profile form.
On the integration profile form, select Validate Connection to verify the connection and credential details of this integration.

Validating the connection verifies the Download Subscriptions APIs, but not the Reclaim Subscriptions APIs.
After the connection is verified, select Publish.
In the Publish Confirmation dialog box, select OK.

What to do next

After the integration connects, your ServiceNow instance automatically creates software models, reclamation rules, and software subscriptions that are refreshed daily.

After creating an integration profile, view information about the profile in the Software Asset Workspace by navigating to License operations > User subscription > Direct integration profiles. You can select an integration profile to view the following related lists. If all of the following related lists aren't visible for an integration profile in the default view, you can select the custom integration view from the Details tab:

Software Models
Unrecognized Subscription Identifiers
Scheduled Jobs
Scheduled Job Results
Software Subscriptions
Subscription Identifier Exclusion Rule
Subscription User Exclusion Rule

After creating an integration profile, you can define subscription exclusion rules to keep certain subscriptions from license cost calculations. For more information, see Subscription exclusions for SaaS and SSO applications.

If you want to set up multiple integration profiles with unique connections, create child aliases to manage different configurations and settings for each integration profile. For more information, see Create a child alias to set up multiple integration profiles.

Review all automatically generated reclamation rules to reclaim user subscriptions. For more information, see Review a software reclamation rule.

Create software entitlements for the automatically generated software models to track used software against owned software.

For more information on creating software entitlements in the Software Asset Management Core UI, see Create entitlements in Software Asset Management Core UI.
For more information on creating software entitlements in the Software Asset Workspace, see Create entitlements in workspace.
For more information on creating software entitlements using the Software Asset Management Playbook, see Create entitlements using the guided walk-through.

Reconciliation also runs on your subscriptions as a scheduled job or on-demand. You can view your reconciliation results in the License Workbench (Software Asset Management classic application) or the License usage view (Software Asset Workspace). Use these results to determine your license compliance position and to remediate any non-compliance.

For more information on running reconciliation in the Software Asset Management classic application, see Run software reconciliation in Software Asset Management classic.
For more information on running reconciliation in the Software Asset Workspace, see Run software reconciliation in the workspace.