---
sourceDocument: Australia ServiceNow AI Platform Administration
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/platform-administration

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia ServiceNow AI Platform Administration

ft:clusterId :

    - platadm

bundleId :

    - platadm

workflow :

    - Platform


---

# Configure source system

# Configure SAP DMS for external content indexing {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 11 minutes to read  
Create service instances and service keys in your SAP Business Technology Platform (BTP) global account to allow the SAP DMS external content connector to access your SAP DMS documents and repositories.

## Before you begin

You must be a global account administrator on the SAP BTP. Your global account must be authorized to access the SAP Document Management Service.  
A SAP global account administrator must have created a subaccount in your SAP BTP global account, with these entitlements:

* Document Management Service, Application Option
* Document Management Service, Integration Option
* Document Management Service, Repository Option
* Cloud Foundry Environment
* Authorization and Trust Management Service

{#configure-sap-dms-external-content-indexing__ul_okj_cd4_bhc}If you don't already have a subaccount with these entitlements in your SAP BTP global account, perform the [Create a subaccount in the SAP Business Technology Platform (BTP)](https://servicenow-prod.fluidtopics.net/14l69QSp1amjCxvoDHVbRQ "Create a subaccount with required entitlements in your SAP global account using the SAP BT cockpit. You need this subaccount in order to configure SAP access for the SAP DMS external content connector.") preliminary task before performing this task.

Role required: none

## About this task

The SAP DMS external content connector retrieves documents from repositories in your SAP DMS source system using the Document Management Service, Integration Option REST API.

To allow the connector to access your SAP DMS source system via this API, you must configure service instances and service keys in the SAP DMS Business Technology Platform (BTP). Your connector administrator can use settings copied from your new service keys to configure the SAP DMS external connector for proper connection to your source system.

## Procedure

1. Create a service instance for the Document Management Service, Application Option in your subaccount.
   1. Log in to the SAP Business Technology Platform (BTP) at <https://cockpit.btp.cloud.sap/> using your global account credentials.
   2. In the Subaccounts tab, select your subaccount.
   3. Navigate to Service Marketplace.
   4. Search for and select the Document Management Service, Application Option entry.
   5. Select Create.
   6. On the New Instance or Subscription form, fill in the fields.  
      {#configure-sap-dms-external-content-indexing__table_ep4_1kx_chc__entry__2}

      | Field | Description |
      |-|-|
      | Plan | Select standard, then select the disclaimer option. |
      | Runtime Environment | Select Cloud Foundry. |
      | Space | Enter the name of the Cloud Foundry space you created for your subaccount. If you followed the subaccount creation steps from [Create a subaccount in the SAP Business Technology Platform (BTP)](https://servicenow-prod.fluidtopics.net/14l69QSp1amjCxvoDHVbRQ "Create a subaccount with required entitlements in your SAP global account using the SAP BT cockpit. You need this subaccount in order to configure SAP access for the SAP DMS external content connector."), this name is <kbd class="ph userinput">DMS</kbd>. |
      | Instance Name | Enter a name of your choice. As an example, you might enter <kbd class="ph userinput">DMS-AO</kbd>. |
      [ ]

      {#configure-sap-dms-external-content-indexing__table_ep4_1kx_chc}
   7. Select Create.  
      SAP BTP creates the Document Management Service, Application Option service instance in your subaccount.
   {#configure-sap-dms-external-content-indexing__substeps_dp4_1kx_chc}
2. Create a service key for your new Document Management Service, Application Option service instance.
   1. From your subaccount, navigate to Instances and Subscriptions.
   2. In the Subscriptions tab, in the row for your new Document Management Service, Application Option service instance, select ...Create Service Key.
   3. On the New Service Key form, enter a name for your new service key.  
      As an example, you might enter <kbd class="ph userinput">DMS-AO</kbd>.
   4. Select Create.  
      SAP BTP creates the Document Management Service, Application Option service key in your subaccount.
   {#configure-sap-dms-external-content-indexing__substeps_v5j_dkx_chc}
3. Create a service instance for the Document Management Service, Integration Option in your subaccount.
   1. Log in to the SAP Business Technology Platform (BTP) at <https://cockpit.btp.cloud.sap/> using your global account credentials.
   2. In the Subaccounts tab, select your subaccount.
   3. Navigate to Service Marketplace.
   4. Search for and select the Document Management Service, Integration Option entry.
   5. Select Create.
   6. On the New Instance or Subscription form, fill in the fields.  
      {#configure-sap-dms-external-content-indexing__table_lpy_qs4_bhc__entry__2}

      | Field | Description |
      |-|-|
      | Plan | Select standard, then select the disclaimer option. |
      | Runtime Environment | Select Cloud Foundry. |
      | Space | Enter the name of the Cloud Foundry space you created for your subaccount. If you followed the subaccount creation steps from [Create a subaccount in the SAP Business Technology Platform (BTP)](https://servicenow-prod.fluidtopics.net/14l69QSp1amjCxvoDHVbRQ "Create a subaccount with required entitlements in your SAP global account using the SAP BT cockpit. You need this subaccount in order to configure SAP access for the SAP DMS external content connector."), this name is <kbd class="ph userinput">DMS</kbd>. |
      | Instance Name | Enter a name of your choice. As an example, you might enter <kbd class="ph userinput">DMS-IO</kbd>. |
      [ ]

      {#configure-sap-dms-external-content-indexing__table_lpy_qs4_bhc}
   7. Select Create.  
      SAP BTP creates the Document Management Service, Integration Option service instance in your subaccount.
   {#configure-sap-dms-external-content-indexing__substeps_njw_3s4_bhc}
4. Create a service key for your new Document Management Service, Integration Option service instance and copy its client settings and API URL.
   1. From your subaccount, navigate to Instances and Subscriptions.
   2. In the Subscriptions tab, in the row for your new Document Management Service, Integration Option service instance, select ...Create Service Key.
   3. On the New Service Key form, enter a name for your new service key.  
      As an example, you might enter <kbd class="ph userinput">DMS-IO</kbd>.
   4. Select Create.  
      SAP BTP creates the Document Management Service, Integration Option service key in your subaccount.
   5. In the Service Keys section, view your new service key by selecting ...View in its entry.
   6. On the Credentials form, copy the clientid, clientsecret, and url values from the uaa section and store them in a secure location.  
      Important:  
      Your external content connector administrator needs these client setting values when configuring the SAP DMS external content connector. {#configure-sap-dms-external-content-indexing__copy-dms-io-client-settings-step}
   {#configure-sap-dms-external-content-indexing__copy-dms-io-client-settings-step}
   7. On the Credentials form, copy the url field value from the endpoints section's ecmservice entry and store it in a secure location.  
      Important:  
      Your external content connector administrator needs this endpoint URL when configuring the SAP DMS external content connector. {#configure-sap-dms-external-content-indexing__copy-dms-io-endpoint-url-step}
   {#configure-sap-dms-external-content-indexing__copy-dms-io-endpoint-url-step}
   8. On the Credentials form, copy the apiurl field value and store it in a secure location.  
      Important:  
      Your external content connector administrator needs this role collections endpoint URL when configuring the SAP DMS external content connector. {#configure-sap-dms-external-content-indexing__copy-role-collections-endpoint-url-step}
   {#configure-sap-dms-external-content-indexing__copy-role-collections-endpoint-url-step}
   9. On the Credentials form, copy the portion of the xsappname field value that appears after the pipe \| symbol and store it in a secure location.  
      As an example, if the xsappname field value is 673dc63a-f785-4225-b974-de10815701fc!b23581\|sdm-di-DocumentManagement-sdm_integration!b62497, the portion of the value to copy is sdm-di-DocumentManagement-sdm_integration!b62497. {#configure-sap-dms-external-content-indexing__copy-xsappname-step}
   {#configure-sap-dms-external-content-indexing__copy-xsappname-step} {#configure-sap-dms-external-content-indexing__substeps_cmz_wv4_bhc}
5. Create a service instance for the Document Management Service, Repository Option in your subaccount.
   1. Log in to the SAP Business Technology Platform (BTP) at <https://cockpit.btp.cloud.sap/> using your global account credentials.
   2. In the Subaccounts tab, select your subaccount.
   3. Navigate to Service Marketplace.
   4. Search for and select the Document Management Service, Repository Option entry.
   5. Select Create.
   6. On the New Instance or Subscription form, fill in the fields.  
      {#configure-sap-dms-external-content-indexing__table_adh_ckx_chc__entry__2}

      | Field | Description |
      |-|-|
      | Plan | Select standard, then select the disclaimer option. |
      | Runtime Environment | Select Cloud Foundry. |
      | Space | Enter the name of the Cloud Foundry space you created for your subaccount. If you followed the subaccount creation steps from [Create a subaccount in the SAP Business Technology Platform (BTP)](https://servicenow-prod.fluidtopics.net/14l69QSp1amjCxvoDHVbRQ "Create a subaccount with required entitlements in your SAP global account using the SAP BT cockpit. You need this subaccount in order to configure SAP access for the SAP DMS external content connector."), this name is <kbd class="ph userinput">DMS</kbd>. |
      | Instance Name | Enter a name of your choice. As an example, you might enter <kbd class="ph userinput">DMS-RO</kbd>. |
      [ ]

      {#configure-sap-dms-external-content-indexing__table_adh_ckx_chc}
   7. Select Create.  
      SAP BTP creates the Document Management Service, Repository Option service instance in your subaccount.
   {#configure-sap-dms-external-content-indexing__substeps_zch_ckx_chc}
6. Create a service key for your new Document Management Service, Repository Option service instance.
   1. From your subaccount, navigate to Instances and Subscriptions.
   2. In the Subscriptions tab, in the row for your new Document Management Service, Repository Option service instance, select ...Create Service Key.
   3. On the New Service Key form, enter a name for your new service key.  
      As an example, you might enter <kbd class="ph userinput">DMS-RO</kbd>.
   4. Select Create.  
      SAP BTP creates the Document Management Service, Repository Option service key in your subaccount.
   {#configure-sap-dms-external-content-indexing__substeps_m4b_3kx_chc}
7. Create a service instance for the Authorization and Trust Management Service in your subaccount.
   1. From your subaccount, navigate to ServicesService Marketplace.
   2. Search for and select the Authorization and Trust Management Service entry.
   3. Select Create.
   4. On the New Instance or Subscription form, fill in the fields.  
      {#configure-sap-dms-external-content-indexing__table_x4n_bw4_bhc__entry__2}

      | Field | Description |
      |-|-|
      | Plan | Select apiaccess. |
      | Runtime Environment | Select Cloud Foundry. |
      | Space | Enter the name of the Cloud Foundry space you created for your subaccount. If you followed the subaccount creation steps from [Create a subaccount in the SAP Business Technology Platform (BTP)](https://servicenow-prod.fluidtopics.net/14l69QSp1amjCxvoDHVbRQ "Create a subaccount with required entitlements in your SAP global account using the SAP BT cockpit. You need this subaccount in order to configure SAP access for the SAP DMS external content connector."), this name is <kbd class="ph userinput">DMS</kbd>. |
      | Instance Name | Enter a name of your choice. As an example, you might enter <kbd class="ph userinput">ATMS</kbd>. |
      [ ]

      {#configure-sap-dms-external-content-indexing__table_x4n_bw4_bhc}
   5. Select Next.
   6. On the New Instance or Subscription form, paste the following JSON code into the Configure instance parameters text entry field, replacing <kbd class="ph userinput">&lt;instance-name&gt;</kbd> with the name of your ServiceNow AI Platform instance.  

          {
            "xsappname": "dms-servicenow-client",
            "tenant-mode": "dedicated",
            "description": "XSUAA config for DMS API access via IAS",
            "oauth2-configuration": {
              "redirect-uris": [
                "https://<instance-name>.service-now.com/oauth_redirect.do"
              ],
              "grant-types": [
                "authorization_code",
                "client_credentials",
                "password",
                "refresh_token"
              ]
            },
            "scopes": [
              {
                "name": "$XSAPPNAME.DMSViewer",
                "description": "Read-only access to DMS repositories"
              },
              {
                "name": "$XSAPPNAME.DMSContributor",
                "description": "Create and modify documents in DMS"
              },
              {
                "name": "$XSAPPNAME.DMSAdministrator",
                "description": "Full administrative access to DMS"
              }
            ],
            "role-templates": [
              {
                "name": "DMSViewerRole",
                "description": "Role for viewing DMS documents",
                "scope-references": [
                  "$XSAPPNAME.DMSViewer"
                ]
              },
              {
                "name": "DMSContributorRole",
                "description": "Role for contributing documents",
                "scope-references": [
                  "$XSAPPNAME.DMSContributor"
                ]
              },
              {
                "name": "DMSAdministratorRole",
                "description": "Role for administering DMS",
                "scope-references": [
                  "$XSAPPNAME.DMSAdministrator"
                ]
              }
            ],
            "authorities": [
              "$XSAPPNAME.DMSViewer",
              "$XSAPPNAME.DMSContributor",
              "$XSAPPNAME.DMSAdministrator"
            ]
          }

   7. Select Create.  
      SAP BTP creates the service instance for the Authorization and Trust Management Service in your subaccount.
   {#configure-sap-dms-external-content-indexing__substeps_w4n_bw4_bhc}
8. Create a service key for your new Authorization and Trust Management Service instance.
   1. From your subaccount, navigate to Instances and Subscriptions.
   2. In the Subscriptions tab, in the row for your new Authorization and Trust Management Service instance, select ...Create Service Key.
   3. On the New Service Key form, enter a name for your new service key.  
      As an example, you might enter <kbd class="ph userinput">ATMS</kbd>.
   4. Select Create.  
      SAP BTP creates the service key for the Authorization and Trust Management Service in your subaccount.
   5. In the Service Keys section, view your new service key by selecting ...View in its entry.
   6. On the Credentials form, copy the clientid, clientsecret, and url values from the service key section and store them in a secure location.  
      Important:  
      Your external content connector administrator needs these client setting values when configuring the SAP DMS external content connector. {#configure-sap-dms-external-content-indexing__copy-atms-credentials-step}
   {#configure-sap-dms-external-content-indexing__copy-atms-credentials-step} {#configure-sap-dms-external-content-indexing__substeps_jb2_sw4_bhc}
9. Create a new instance for the Authorization and Trust Management Service with the application plan in your SAP BTP subaccount.
   1. From your subaccount, navigate to ServicesInstances and Subscriptions.
   2. Select Create.
   3. On the New Instance or Subscription form's Basic Info page, fill in the fields.  
      {#configure-sap-dms-external-content-indexing__table_lwf_h3k_hhc__entry__2}

      | Field | Description |
      |-|-|
      | Service | Select Authorization and Trust Management Service. |
      | Plan | Select application. |
      | Runtime Environment | Select Cloud Foundry. |
      | Space | Select DMS. Note: This is the name of the Cloud Foundry space you created for your SAP BTP subaccount. For details on this procedure, see [Create a subaccount in the SAP Business Technology Platform (BTP)](https://servicenow-prod.fluidtopics.net/14l69QSp1amjCxvoDHVbRQ "Create a subaccount with required entitlements in your SAP global account using the SAP BT cockpit. You need this subaccount in order to configure SAP access for the SAP DMS external content connector."). |
      | Instance Name | Enter a unique name for this service instance. |
      [ ]

      {#configure-sap-dms-external-content-indexing__table_lwf_h3k_hhc} {#configure-sap-dms-external-content-indexing__atms-app-plan-instance-step}
   {#configure-sap-dms-external-content-indexing__atms-app-plan-instance-step}
   4. Select Next.
   5. On the New Instance or Subscription form's Parameters page, paste the following JSON code into the Configure instance parameters text entry field, replacing <kbd class="ph userinput">&lt;service-name&gt;</kbd> with the name you entered for the new Authorization and Trust Management Service instance with the application plan in step [9.c](https://servicenow-prod.fluidtopics.net/iabY0vLgSR8jC6BRAbMBKg#configure-sap-dms-external-content-indexing__atms-app-plan-instance-step), <kbd class="ph userinput">&lt;instance-name&gt;</kbd> with the name of your ServiceNow AI Platform instance, and <kbd class="ph userinput">&lt;xsappname&gt;</kbd> with the xsappname substring that you copied in step [4.i](https://servicenow-prod.fluidtopics.net/iabY0vLgSR8jC6BRAbMBKg#configure-sap-dms-external-content-indexing__copy-xsappname-step).  

          {
            "xsappname": "<service-name>",
            "tenant-mode": "dedicated",
            "description": "XSUAA config for DMS API access via IAS",
            "oauth2-configuration": {
              "redirect-uris": [
                "https://<instance-name>.service-now.com/oauth_redirect.do"
              ],
              "grant-types": [
                "authorization_code",
                "client_credentials",
                "password",
                "refresh_token"
              ]
            },
            "scopes": [
              {
                "name": "$XSAPPNAME.DMSViewer",
                "description": "Read-only access to DMS repositories"
              },
              {
                "name": "$XSAPPNAME.DMSContributor",
                "description": "Create and modify documents in DMS"
              },
              {
                "name": "$XSAPPNAME.DMSAdministrator",
                "description": "Full administrative access to DMS"
              }
            ],
            "role-templates": [
              {
                "name": "DMSViewerRole",
                "description": "Role for viewing DMS documents",
                "scope-references": [
                  "$XSAPPNAME.DMSViewer"
                ]
              },
              {
                "name": "DMSContributorRole",
                "description": "Role for contributing documents",
                "scope-references": [
                  "$XSAPPNAME.DMSContributor"
                ]
              },
              {
                "name": "DMSAdministratorRole",
                "description": "Role for administering DMS",
                "scope-references": [
                  "$XSAPPNAME.DMSAdministrator"
                ]
              }
            ],
            "authorities": [
              "$ACCEPT_GRANTED_AUTHORITIES",
              "<xsappname>.sdmadmin",
              "<xsappname>.sdmbusinessadmin"
            ],
            "foreign-scope-references": [
              "<xsappname>.sdmuser",
              "<xsappname>.sdmadmin",
              "<xsappname>.sdmbusinessadmin"
            ]
          }

   6. Select Create.  
      SAP BTP creates the service instance for the Authorization and Trust Management Service with the application plan in your subaccount.
   {#configure-sap-dms-external-content-indexing__substeps_rl4_13k_hhc}
10. Create a service key for your new Authorization and Trust Management Service instance with the application plan.
    1. From your subaccount, navigate to Instances and Subscriptions.
    2. In the Subscriptions tab, in the row for your new Authorization and Trust Management Service instance with the application plan, select ...Create Service Key.
    3. On the New Service Key form, enter a name for your new service key.  
       As an example, you might enter <kbd class="ph userinput">ATMS-app-plan</kbd>.
    4. Select Create.  
       SAP BTP creates the service key for the Authorization and Trust Management Service instance with the application plan in your subaccount.
    5. In the Service Keys section, view your new service key by selecting ...View in its entry.
    6. On the Credentials form, copy the clientid and clientsecret values from the service key section and store them in a secure location.  
       Important:  
       Your external content connector administrator needs these client setting values when configuring the SAP DMS external content connector. {#configure-sap-dms-external-content-indexing__copy-token-exchange-settings-step}
    {#configure-sap-dms-external-content-indexing__copy-token-exchange-settings-step} {#configure-sap-dms-external-content-indexing__substeps_acx_f3k_hhc}
11. Copy the base web URL for documents in your SAP DMS tenant.
    1. Log in to your SAP DMS tenant using your global account credentials.
    2. Navigate to a repository of your choice.
    3. In the repository, navigate to a folder of your choice that contains one or more documents.
    4. Select ... in any document entry, then select Show properties from the context menu.
    5. Copy the Web Link for the document, then extract the base web URL and store it in a secure location.  
       The base web URL is the portion of the Web Link URL that ends with /open. As an example, if the Web Link URL is
       https://example.sap.com/cp.portal/site#user-display?sap-ui-app-id-hint=com.sap.ecm.sdm.user\&/documents/v1/open/rep=ABCDE\&obj=12345\&vs=1, the base web URL is
       https://example.sap.com/cp.portal/site#user-display?sap-ui-app-id-hint=com.sap.ecm.sdm.user\&/documents/v1/open.  
       Important:  
       Your external content connector administrator needs this base web URL when configuring the SAP DMS external content connector. {#configure-sap-dms-external-content-indexing__copy-base-web-url-step}
    {#configure-sap-dms-external-content-indexing__copy-base-web-url-step} {#configure-sap-dms-external-content-indexing__substeps_lst_4dm_fhc}

## What to do next

Provide the following items to your connector administrator:

* The client ID, client secret, and access token URL that you copied from the service key for the Document Management Service, Integration Option service instance in step [4.f](https://servicenow-prod.fluidtopics.net/iabY0vLgSR8jC6BRAbMBKg#configure-sap-dms-external-content-indexing__copy-dms-io-client-settings-step).
* The ecmservice endpoint URL that you copied from the service key for the Document Management Service, Integration Option service instance in step [4.g](https://servicenow-prod.fluidtopics.net/iabY0vLgSR8jC6BRAbMBKg#configure-sap-dms-external-content-indexing__copy-dms-io-endpoint-url-step).
* The role collections endpoint URL that you copied from the service key for the Document Management Service, Integration Option service instance in step [4.h](https://servicenow-prod.fluidtopics.net/iabY0vLgSR8jC6BRAbMBKg#configure-sap-dms-external-content-indexing__copy-role-collections-endpoint-url-step).
* The client ID, client secret, and access token URL that you copied from the service key for the Authorization and Trust Management Service instance in step [8.f](https://servicenow-prod.fluidtopics.net/iabY0vLgSR8jC6BRAbMBKg#configure-sap-dms-external-content-indexing__copy-atms-credentials-step).
* The client ID and client secret that you copied from the service key for the Authorization and Trust Management Service instance with the application plan in step [10.f](https://servicenow-prod.fluidtopics.net/iabY0vLgSR8jC6BRAbMBKg#configure-sap-dms-external-content-indexing__copy-token-exchange-settings-step).
* The base web URL that you copied in step [11.e](https://servicenow-prod.fluidtopics.net/iabY0vLgSR8jC6BRAbMBKg#configure-sap-dms-external-content-indexing__copy-base-web-url-step).
{#configure-sap-dms-external-content-indexing__ul_jbv_n54_bhc}

Your connector administrator needs these items to configure a SAP DMS external content connector to retrieve documents and security principals from your SAP DMS source system.

For details on creating and configuring a SAP DMS external content connector, see [Create a SAP DMS external content connector](https://servicenow-prod.fluidtopics.net/RhmCYd6msQHdKYOZI6o3~w "Create an external content connector to retrieve searchable content and security principals from your SAP DMS source system.").

*[\>]: and then