8.2 OAuth Authentication for Provisioning API

SaaS Account Management with Access Manager uses OAuth to authenticate calls to the ServiceNow Table API when provisioning users. In the Account Management section of the application connector in Access Manager, values for Instance name, User credentials, Client ID, and Client secret are required.

The OAuth Client ID and Client Secret both come from an OAuth Application Registry. If you do not already have an Application Registry in ServiceNow, you must create a new one. Otherwise, you can find the Client ID and Client Secret associated with an existing OAuth Application Registry. For more information, see the following topics:

8.2.1 Creating a New OAuth Application Registry

Complete the following steps to create a new OAuth Application Registry.

  1. Log in to the ServiceNow home page using your administrative user account.

  2. In the list of settings on the left side, expand System OAuth and select Application Registry.

  3. At the top of the list, select New.

  4. Select Create an OAuth API endpoint for external clients.

  5. Enter a name for the Application Registry, such as Account Provisioning API Authentication.

  6. Either enter a string in the Client Secret field, or leave it blank to generate a secure Client Secret.

  7. Verify that the Application field value is Global.

  8. Verify that the Accessible from field value is All application scopes.

  9. Verify that the Active check box is selected.

  10. (Optional) Change or leave the default values in the other fields in the form.

  11. Click Submit.

8.2.2 Finding the Client ID and Client Secret for an Existing Application Registry

Complete the following steps to find the Client ID and Client Secret associated with an existing OAuth Application Registry.

  1. Log in to the ServiceNow home page using your administrative user account.

  2. In the list of settings on the left side, expand System OAuth and select Application Registry.

  3. Click the name of the Application Registry you want to use to authenticate provisioning API requests.

  4. The value shown next to Client ID is the value you use for the Client ID setting in the Account Management section of the ServiceNow application in Access Manager.

  5. To see the Client Secret, click the Toggle Password Visibility button next to the Client Secret field. The button's icon looks like a padlock.

  6. The value shown under the Client Secret field is the value you use for the Client Secret setting in the Account Management section of the ServiceNow application in Access Manager.