Configure OAuth in ServiceNow

[David Santel]

Can anyone help solve the below OAuth setup question?

In order to use OAuth(Azure) I need to know these 2 fields (OAuth should be configured by ServiceNow’s instance admin (you), https://docs.servicenow.com/bundle/madrid-platform-administration/page/administer/security/task/t_Se... 😞

- client_id

- client_secret

In summary, I need to solve this authentication problem: create (or just grant access) to local user or configure OAuth in ServiceNow and give me values for those 2 fields

[Ankur Bawiskar]

Hi,

that property is by default active in instance.

if not then you can set the value as active to it

search it and set to true

Regards
Ankur

[Madhusudan1]

@Ankur Bawiskar Thanks a lot for this detailed explanation. However, we have ran into situation while testing on Postman - Only Admin accounts are able to generate accesstoken.

Non-Admin users get access_denied error within postman call. (We are testing by granting itil, API , REST related roles) - not been successful.

What would you suggest to troubleshoot further. If ACL ? Which tables would it be ?

Madhusudan

[Ankur Bawiskar]

Hi,

I was able to generate access token by user who had no role

I suspected it is the read ACL on oauth_credential table not allowing non-admin user to read the access or refresh token hence failing to make REST API call.

Regards
Ankur

[Madhusudan1]

Thanks @Ankur Bawiskar . I was able to test this successfully on PDI with a user who had no role.

Following up - What would be a good practice to allow access to oauth_credential table ? Would you suggest read only access to all users/apps or a dedicated role to be added to only select accounts generating tokens?

[Ankur Bawiskar]

Hi Madhusudan,

I was able to generate the access token using a user who didn't have any role.

So I believe you need to check and revisit the ACLs on that table.

Regards
Ankur