OAuth for inbound REST request using Client Credentials grant type

[funkeke]

I am setting up an integration between SharePoint 2013 and ServiceNow. I will be issuing inbound REST requests FROM SharePoint TO ServiceNow using the out-of-box Table REST API provided by ServiceNow. I would like to authorize the request using OAuth, specifically the Client Credentials grant type (in which a client ID and secret are used to get the access token).

Let's assume I have gone to the Application Registry, clicked "Create an OAuth API endpoint for external clients" and proceeded to register my SharePoint application and get a client ID and secret.

My question is in regards to how I will issue the request to get the access token. The ServiceNow London documentation states that the Client Credentials grant type is supported, however I cannot find an example in the documentation of issuing the request for the access token using this grant type. I am assuming I should be able to issue a request for the token with JUST the client ID and secret attached and no user credentials. But the only examples I can find are for the Password and Token Refresh grant types (here's one example and another). The Password grant type requires the client ID and secret, as well as a username and password be sent, which is not what I would like to do. Either these pages haven't been updated since support for more grant types was added, or I'm misinterpreting how this is supposed to work. 

Would it be as simple as removing the username and password parameters from the requests in the examples and changing "grant_type" to "client_credentials"?

Also, once you get the access token, how does ServiceNow determine what access rights the client application is authorized for? My understanding is that the access token will not be associated with any specific user, but rather to the registered client application (SharePoint). I need to do simple CRUD operations on a request table (create, read, and update). Will I be able to do this using the Client Credentials grant type? What else will the client application be able to do? Is this configurable?

[Aoife]

Just in case someone lands on this specific article in the future, it is possible to do inbound client_credentials in ServiceNow OAuth:
https://www.servicenow.com/community/developer-blog/up-your-oauth2-0-game-inbound-client-credentials... 

Aoife

[Inactive_Use754]

Hi,

Did you find any way to make "client_credentials" grant type work with inbound REST calls? I have similar requirement and third party applicationdoes not work with any other grant types.

Thank you.

[Kristoffer Mon1]

I very recently integrated BOX's API with ServiceNow; which used a Oauth to retrieve an authorization code that I can use to retrieve an access token.

With all that jazz being said, what ultimately are you trying to achieve in your Sharepoint to ServiceNow integration? Interested because this is on my development road map, and maybe I could be of some help.

[hkumar468746575]

@Ankur Bawiskar How to pass below in body of request?

using following in body of the request

grant_type -> password

client_id -> your client id

client_secret -> your client secret

username -> user id in snow

password -> password in snow

content-type -> application/x-www-form-urlencoded

[shivanshu272]

Hi @hkumar468746575,

Here's how you can pass these values in your body.

curl --location 'https://instance.service-now.com/oauth_token.do' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'grant_type=password' \
--data-urlencode 'client_id=YOUR CLIENT ID' \
--data-urlencode 'client_secret=YOUR CLIENT SECRET' \
--data-urlencode 'username=USERNAME' \
--data-urlencode 'password=PASSWORD'

Mark Helpful if you find my response worthy based on the impact.
Thanks
Shivanshu