Outbound REST web service with one-way SSL certificate Authentication

[surendarm]

Hello,

We are trying to implement an Outbound REST web service in ServiceNow with basic SSL certificate based Authentication.

Since we dont have this option OOB for REST in ServiceNow, we need to configure similar to SOAP or we need to follow some different way to accomplish this integration.

In Outbound SOAP web service, we perform basic SSL certificate Authentication using "WS-Security" where we will attach the third party application certificate and the authentication happens.

When we tried to do the REST call by uploading the SSL Certificate to Trusted Root Certification Authorities of Chrome, using POSTMAN, it works fine.

Has anyone tried to perform Outbound REST web service with one-way SSL certificate Authentication in ServiceNow?

Thanks in advance.

[rajeevlochan82]

Hi Surender,

Do not know if you still need any help on this but we used the SSL approach in outbound Rest call for ADP integration.

1) We have Protocol Profile in Rest Message where you can choose a SSL entry. You need to create this SSL entry in Protocol Profile table. Also if you name your protocol profile as adphttps then when yo make a Test Rest call you will notice that servicenow place this protocol profile name in front of your rest URL like "adphttps://accounts.adp.com/auth/oauth/v2/token?grant_type=client_credentials" ( though my Rest endpoint was https://accounts.adp.com/auth/oauth/v2/token?grant_type=client_credentials )

[surendarm]

Hi Rajeev,

Thank you, for your valuable inputs.

The ADP integration which you have done through SSL approach over Outbound REST Web Service, was a Mutual Authentication between ServiceNow and ADP or it was One-way SSL Authentication?

Thanks,

Surendar M

[rajeevlochan82]

Hi Surender,

Its One way SSL authentication. We have to upload the pfx file in X.509 certificate table. Is there any specific integration you are performing ?

We did couple of O-auth Integration which required the Auth Token but in case of ADP approach we have to use SSL certificate.

Thanks,

Rajeev Lochan

[surendarm]

Hi Rajeev,

      In ServiceNow WIKI, when i was looking for "Protocol Profile in Rest Message", i could see this option is available only if we go for mutual authentication.

To give you a brief background about the integration which i am trying to configure,

- We have a third party application to be integrated which supports Outbound REST Web Service through One-Way SSL authentication

- We have the Certificate from that third party application which is in PEM format

If the "Protocol Profile" in REST Message works for One-Way SSL Authentication, can you please let me know how should I be proceeding with this? That would much helpful for me to configure this integration.

Thanks,

Surendar M