X.509 Certificate to validate jwt token

dheerajgovind
Tera Contributor

Problem statement: Trying to set up OIDC API authentication. 

We have DUO which provide a jwt token for client who want to connect to Servicenow API using that jwt token

DUO also provide jwks end point for the client where we get the JSON web key set and form which the RSA public key can be obtained to verify the signature of that JWT token. this works fine in jtw.io website.

 

I am trying to create a jwt verifier map where i am trying to create a certificate and attach to the verifier map.

but servicenow cannot recognise this RSA public key as a valid x.509 certificate. hence the jwt verification fails when we pass the jwt token received form DUO to the oauth_token.do end point in servicenow.

 

Question: is there any solution to use jwks end point to validate the signature within servicenow? 

How to generate a valid x.509 certificate from a RS Public key or a JSON web key set? 

 

 

0 REPLIES 0