Guidance Required: Implementing JWT SSO for External Users Integrated from a Third-Party Application

[amulozuchai]

Hi Community,

I am currently working on an integration where a third-party application pushes external user records into ServiceNow. The original implementation only involved user provisioning from the external system to ServiceNow.

Recently, the client introduced a new requirement: they would like external users to authenticate into ServiceNow using JWT-based Single Sign-On (SSO), enabling a seamless login experience between the third-party application and ServiceNow. The expectation is that once users are authenticated in the external application, they can access ServiceNow without having to log in again.

I would appreciate guidance on the following:

1. Is JWT-based SSO for ServiceNow external users a supported and recommended approach?
2. What are the prerequisite configurations on both the ServiceNow and identity provider/application sides?
3. What are the high-level implementation steps to configure JWT authentication/SSO in ServiceNow?
4. Are there any specific considerations for externally provisioned users?
5. Can anyone share relevant ServiceNow documentation, best practices, or implementation experiences for this scenario?

Any references, architecture recommendations, or lessons learned would be greatly appreciated.

Thanks in advance!