We are working on a ServiceNow integration with a third-party system where we have to fulfil the ServiceNow ticket based on how an access request progresses in the third-party system. For this we are doing investigation on the Authorization code OAuth flow where our third-party system is a OAuth provider for ServiceNow.
To achieve this we have created a OAuth Client Profile in ServiceNow. When we are clicking on “Get OAuth Token” on Outbound REST message, a popup appears where we provide the correct user authentication parameters and submits it. On submit we get below error:
HTTP Error 401 - Unauthorized
We tried debugging the issue through ‘OAuthUtil’ script. We added log statements in the “postProcessAccessToken” which printed below response:
"status":"401", "error": "unauthorized", "message": "Full authentication is required to access this resource"
We suspect this is happening because ServiceNow is not sending below basic authorization header information in the token request.
Header: 'Authorization: Basic Base64(clientId:clientSecret)
The same thing is working using the POSTMAN client configured for third-party OAuth provider.
Could anyone please confirm if ServiceNow sends the client authentication information(client id and secret) in the token request header for third party OAuth provider.
