OAuth2.0 without username and password

[Daniel M3]

Hello SNOW Communty!  

My team and I have been trying to access information from our instance tables without passing usernames and password. According to the documentation, it seems that you need to pass username and password once, and using the refresh token, you can make subsequent calls without exposing user credentials.  

What we would like to do however, is pass in only the client id and secret to access the instance information. We tried using POST to  https://xxxx.service-now.com/oauth_token.do with headers  grant_type=client_credentials, client_id=*******, and client_secret=********, but the access token sent back does not seem to authorize the GET call.  

Any help is appreciated. Thanks!  

[Ankur Bawiskar]

Hi,

I don't think you can restrict the team not to use basic auth although they have agreed upon for OAuth during initial technical discussions. You have shared them basic auth details i.e. username and password.

Need to deep dive into this how ServiceNow can enforce OAuth and not allow basic auth

Regards

Ankur

[Ankur Bawiskar]

Hi Daniel,

Any update on this. Can you mark the answer as correct, helpful and hit like. This helps users to search similar question and removes this question from unanswered list. Thanks in advance.

Regards

Ankur

[Manjunath P Jak]

Yes I too agree with daniel there should be some way where a third party is provided with api-key through which they should be able to access certain api based on the roles without any expiration time with which they can integrate with their systems current oauth has a limit on expiration as the time to expire for the refresh token and again the third party app had to get new refresh and access token using username and password. Atleast the username password fields should be eliminated and provision has to be made to renew the refresh_token so that third party app can go on infinitely also with the control of access and token with hands of servicenow.

[Ankur Bawiskar]

Hi Daniel,

Any update on this. Can you mark the answer as correct, helpful and hit like. This helps users to search similar question and removes this question from unanswered list. Thanks in advance.

Regards

Ankur

[Ankur Bawiskar]

Hi Daniel,

Any update on this. Can you mark the answer as correct, helpful and hit like. This helps users to search similar question and removes this question from unanswered list. Thanks in advance.

Regards

Ankur