--- sourceDocument: Australia Operational Technology Management sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/operational-technology Release : - australia ft:locale : - en-US ft:publication_title : - Australia Operational Technology Management ft:clusterId : - optm bundleId : - optm workflow : - Technology --- # Service Graph Connector for Microsoft Defender for IoT (Azure) # Service Graph Connector for Microsoft Defender for IoT (Azure) {#ariaid-title1} Release version: Australia Updated March 12, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Service Graph Connector for Microsoft Defender for IoT (Azure) The Service Graph Connector for Microsoft Defender for IoT integrates with the ServiceNow® Operational Technology Manager application to automate the import of Operational Technology (OT) devices and sensor appliances. This integration enables efficient management of OT environments by ensuring that relevant data is accurately captured and represented in ServiceNow's Configuration Management Database (CMDB). Show full answer Show less ## Key Features * **Supported Versions:** Compatible with Microsoft Defender for IoT sensor versions 22.2.3.22 and 22.2.5.9. * **Guided Setup:** An organized setup process is available to configure the integration seamlessly. * **CMDB Integrations Dashboard:** Provides a central view of the status and results of all installed integrations, along with filtering options for specific metrics. * **Data Mapping:** Data from Defender for IoT is transformed into CMDB class definitions using the Robust Transform Engine (RTE) and imported using the Identification and Reconciliation Engine (IRE). * **Connection Details:** Access connection details in a single view through the common connection framework (CCF) within the Integration Commons for CMDB. ## Key Outcomes By implementing the Service Graph Connector for Microsoft Defender for IoT, ServiceNow customers can expect: * Automated and accurate import of OT devices and sensors into the ServiceNow CMDB. * A streamlined process for monitoring and managing integration statuses and errors through the CMDB Integrations Dashboard. * Improved operational efficiency in managing OT environments with automatic data updates and validation of imported sensors. Integrate Microsoft Defender for IoT with the ServiceNow® Operational Technology Manager application to automate import of OT devices and sensor appliances. ## Request apps on the Store {#integration-sgc-microsoft-defender-iot-azure__section_cwp_rnr_fzb} Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html). ## Supported versions {#integration-sgc-microsoft-defender-iot-azure__section_hh1_wnr_fzb} Supports Microsoft Defender for IoT sensor versions: * 22.2.3.22 * 22.2.5.9 {#integration-sgc-microsoft-defender-iot-azure__ul_yjw_xl5_21c} ## Use cases {#integration-sgc-microsoft-defender-iot-azure__section_zvw_ck4_lzb} You can use the Service Graph Connector for Microsoft Defender for IoT (Azure) with the ServiceNow® Operational Technology Manager application to import OT devices and sensor appliances. ## Guided setup {#integration-sgc-microsoft-defender-iot-azure__section_isq_z4r_fzb} The guided setup for the Service Graph Connector for Microsoft Defender for IoT (Azure) provides an organized sequence of tasks to configure the integration on your instance. To access the guided setup, see [Configure guided setup](https://servicenow-prod.fluidtopics.net/EuTF0Liekxka2BKVGw_zRg "Use the guided setup for the Service Graph Connector for Microsoft Defender for IoT (Azure) to lead you through the integration steps."). ## CMDB integrations dashboard {#integration-sgc-microsoft-defender-iot-azure__id_m2t_vrr_fzb} The Integration Commons for CMDB store app provides a dashboard with a central view of the status, processing results, and processing errors of all installed integrations. You can see metrics for all integration runs. You can filter the view to a specific CMDB integration, a specific time duration, or a specific integration run. For more details about monitoring integrations in the CMDB Integrations Dashboard, see [Integration Commons for CMDB](https://www.servicenow.com/docs/access?context=integration-commons-for-cmdb&version=australia&pubname=australia-servicenow-platform&ft:locale=en-US#section_fxg_lh4_blb). ## Data mapping {#integration-sgc-microsoft-defender-iot-azure__section_ic1_gsr_fzb} Data from the Microsoft Defender for IoT (Azure) data sources is mapped and transformed into the ServiceNow CMDB Configuration Item (CI) class definitions using the Robust Transform Engine (RTE). Data is inserted into the ServiceNow CMDB using the Identification and Reconciliation Engine (IRE). When you complete the setup, you can configure the integration to periodically pull data from the Microsoft Defender for IoT (Azure) application. The following table lists the data sources included for a Microsoft Defender for IoT (Azure) project and the corresponding staging tables where the imported data is loaded.{#integration-sgc-microsoft-defender-iot-azure__table_tpk_mxy_fzb__entry__2} | Data source | Staging table | |-|-| | SG-OT Azure D4IoT Devices Import | SG-OT Azure D4IoT Devices Import \[sn_msftd4iotazsgc_sg_ot_azure_d4iot_devices_import\] | | SG-OT Azure D4IoT Sensors Import | SG-OT Msft D4IoT Sensors Import \[sn_msftd4iotazsgc_sg_ot_azure_d4iot_sensors_import\] | [Table 1. Data sources and staging tables for Microsoft Defender for IoT (Azure)] {#integration-sgc-microsoft-defender-iot-azure__table_tpk_mxy_fzb} The imported data from the staging tables is then inserted into the following target tables: * AIX Server \[cmdb_ci_aix_server\] * Computer \[cmdb_ci_computer\] * Configuration Item \[cmdb_ci\] * DCS \[cmdb_ci_ot_dcs\] * ESX Server \[cmdb_ci_esx_server\] * EWS \[cmdb_ci_ot_ews\] * External System Metadata \[cmdb_key_value_v2\] * Game Console \[cmdb_ci_game_console\] * Handheld Computing Device \[cmdb_ci_handheld_computing\] * Historian \[cmdb_ci_ot_historian\] * HMI \[cmdb_ci_ot_hmi\] * HP-UX Server \[cmdb_ci_hpux_server\] * HVAC Equipment \[cmdb_ci_hvac\] * HyperV Server \[cmdb_ci_hyper_v_server\] * IED \[cmdb_ci_ot_ied\] * Industrial Actuator \[cmdb_ci_ot_industrial_actuator\] * Industrial Drive \[cmdb_ci_ot_industrial_drive\] * Industrial Robot \[cmdb_ci_ot_industrial_robot\] * Industrial Sensor \[cmdb_ci_ot_industrial_sensor\] * IoT Device \[cmdb_ci_iot\] * IP Address \[cmdb_ci_ip_address\] * IP Camera \[cmdb_ci_ip_camera\] * IP Firewall \[cmdb_ci_ip_firewall\] * IP Phone \[cmdb_ci_ip_phone\] * Linux Server \[cmdb_ci_linux_server\] * Netgear \[cmdb_ci_netgear\] * Network Adapter \[cmdb_ci_network_adapter\] * Network Intrusion Detection System \[cmdb_ci_nids\] * Operational Technology (OT) \[cmdb_ci_ot\] * OSX Server \[cmdb_ci_osx_server\] * OT Control Module \[cmdb_ci_ot_control_module\] * OT Control System \[cmdb_ci_ot_control\] * OT Device Details \[cmdb_ot_entity\] * OT Field Device \[cmdb_ci_ot_field_device\] * PLC \[cmdb_ci_ot_plc\] * Printer \[cmdb_ci_printer\] * RTU \[cmdb_ci_ot_rtu\] * Serial Number \[cmdb_serial_number\] * Server \[cmdb_ci_server\] * Server \[cmdb_ci_server\] * Solaris Server \[cmdb_ci_solaris_server\] * Source \[sys_object_source\] * Unix Servercmdb_ci_unix_server\] * Uninterruptible Power Supply (UPS) \[cmdb_ci_ups\] * Wireless Access Point \[cmdb_ci_wap_network\] {#integration-sgc-microsoft-defender-iot-azure__ul_pqq_4yy_fzb} For more information on where data is saved when pulling data from a Microsoft Defender for IoT (Azure) project, see [CMDB classes targeted](https://servicenow-prod.fluidtopics.net/NzppNsbA2PC7T~CSHMfxKg "When you complete the guided setup, you can configure the integration to periodically pull data from a Service Graph Connector for Microsoft Defender for IoT (Azure) (Azure) project. The data is saved in tables that extend from the Configuration item [cmdb_ci] table."). * **[Configure the Service Graph Connector for Microsoft Defender for IoT (Azure)](https://servicenow-prod.fluidtopics.net/EuTF0Liekxka2BKVGw_zRg)** Use the guided setup for the Service Graph Connector for Microsoft Defender for IoT (Azure) to lead you through the integration steps. * **[Validate NIDS sensors](https://servicenow-prod.fluidtopics.net/1U_W1gNVTDZxJhSMywSWkg)** Validate the Network IDS (NIDS) sensors once they're imported to prepare for the device import. Sensors only pass the validation if they aren't in learning mode as such sensors are not eligible for device import. * **[Accessing the connection details of the Service Graph Connector for Microsoft Defender for IoT (Azure)](https://servicenow-prod.fluidtopics.net/91wzeAgrQOcJroqJ_uiybA#sgc-cmdb-msft-d4iot-azure)** You can access the connection details of the Service Graph Connector for Microsoft Defender for IoT (Azure) in a single view using the common connection framework (CCF) included within the Integration Commons for CMDB (sn_cmdb_int_util) store app. * **[Import OT devices using the Standard mode of discovery](https://servicenow-prod.fluidtopics.net/Zo6eAImleapRcAhlFam14Q)** Use the Service Graph Connector for Microsoft Defender for IoT (Azure) to import Operational Technology (OT) devices discovered through the Standard mode of discovery from Microsoft Defender for IoT. * **[CMDB classes targeted in the Service Graph Connector for Microsoft Defender for IoT (Azure)](https://servicenow-prod.fluidtopics.net/NzppNsbA2PC7T~CSHMfxKg)** When you complete the guided setup, you can configure the integration to periodically pull data from a Service Graph Connector for Microsoft Defender for IoT (Azure) (Azure) project. The data is saved in tables that extend from the Configuration item \[cmdb_ci\] table. * **[Attribute mapping and classification for Service Graph Connector for Microsoft Defender for IoT (Azure)](https://servicenow-prod.fluidtopics.net/Sn9AtGJqiSgzGHX5IpAwAA)** The following tables describe the attribute mapping and classification for sensors and devices.