Support for the `user` context in the Client Credentials

[Pulkit Singhal]

Hi, I previously read that the `user` context was not supported in the Client Credentials-based authentication. However, the current documentation seems to indicate that it is now supported.

My question is whether this functionality has also been made available in older versions of ServiceNow for customers who choose not to upgrade or prefer to stick with an older version. If not, is the `guest` user specification used in those previous versions?

[Its_Azar]

Hi there @Pulkit Singhal 

 In older versions where this functionality might not be available, the `guest` user specification is typically used as an alternative.

If you're using an older version of ServiceNow and the `user` context is not supported in Client Credentials-based authentication, you can consider using the `guest` user instead. The `guest` user is a built-in user account in ServiceNow that is often used for unauthenticated or anonymous access. It provides limited access to certain functionalities based on configured permissions.

If this helps kindly accept the response thanks much.

[Randheer Singh · Accepted solution]

Hi @Pulkit Singhal ,
Yes, From the Washington DC release, in the officially supported Client Credential grant for inbound API Authentication admin has to choose an integration user. The tokens would be issued to this integration user.

 
Thanks,

Randheer

[Pulkit Singhal]

@Randheer Singh Just for my understanding, this is not going to be available in the versions before Washington?

Also does the users need to always upgrade the instance in ServiceNow or they can choose to stick with the older verison?

[Randheer Singh]

HI @Pulkit Singhal ,
The support for client credentials grant is getting added in the W release. It will not be available in any prior release. We recommend customers upgrade to this version for better support and maintainability.

We also recommend customers make use of the auth scope feature to ensure that the access token received as part of this grant can only be used for APIs allowing those scopes. For more information on scope please refer to this community article.