We've updated the ServiceNow Community Code of Conduct, adding guidelines around AI usage, professionalism, and content violations. Read more

"Disable consent screen" ignored in OAuth Application Registry (ROPC Grant)

ajinkya003
Kilo Explorer

Hello,

I am experiencing an issue where the "Disable consent screen" setting is being ignored on an OAuth Application Registry record. My goal is to allow users to authenticate via a 3rd-party application without being stopped by the manual "Allow/Deny" authorization prompt.
Config Details:
Instance Version: Zurich
Default Grant type: Resource Owner Password Credentials (ROPC)
Refresh Token Lifespan: 8,640,000 seconds (100 days)
Access Token Lifespan: 1,800 seconds (30 minutes)
Disable consent screen: Enabled
Public Client: Unchecked (False)
The Issue: Despite the "Disable consent screen" option being enabled on a oauth registry record, the 3rd-party application is still redirected to a page requiring a manual click on "Allow".

I am looking for help to understand why this setting is being bypassed or if there is a specific configuration step I am missing.

0 REPLIES 0