Application Registry for transfer data from ServiceNow to external tool.

[Aryan]

Hi All,

I have no experience on how application registry is working......Our requirement is that the external tool want to fetch the timeworked data from ServiceNow and store it to their tool.

I have created a "Create an OAuth API endpoint for external clients"  and i have provided the client id and client secrete to the client. Can anyone help me what is the next step??

1. What will be the redirect URL?

2. Do i need to create a integration user?

3. How external system login in ServiceNow and fetch data?

4. What do i need from client side?

This is the urgent request if anyone have any idea please help!!!

[Aryan]

Hello @Ankur Bawiskar ,

Thank you for sharing your blog. My most of the doubts was clear.

However the few last questions i have are below, if possible please share your thoughts.

1. During first API call , I need to supply the user name and password to client? so that they will get the access and refresh token.

2. If Yes, after the access token get expired client can use the refresh token and again get anew access token? we do not have to configure anything for this in ServiceNow right?

[Ankur Bawiskar]

@Aryan 

Responses line

1. During first API call , I need to supply the user name and password to client? so that they will get the access and refresh token. -> that's correct they need to get use it for the 1st time

2. If Yes, after the access token get expired client can use the refresh token and again get anew access token? we do not have to configure anything for this in ServiceNow right? -> that's how OAuth works and provides security, they need to generate the refresh token again just before the expiry of the current one. I have seen customers keeping lifespan of refresh token as 1 year etc as Access token provides the actual security as it changes every 30mins

If my response helped please mark it correct and close the thread so that it benefits future readers

[Aryan]

Hi @Ankur Bawiskar,

For the initial step, is it possible to utilize SSO login without requiring the user's ID and password? Currently, an AD user is being used, but the client prefers not to store the ID and password on their side due to security concerns.

[Ankur Bawiskar]

@Aryan 

the API user should be local account and then only it can be used for OAuth to get the token.

If that user is AD user then the password is not stored in ServiceNow but stored in AD server and you can't share to external team.

I believe I have provided enough guidance and answered your question.

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Ankur Bawiskar]

@Aryan 

I believe I have provided answers to your original question and subsequent questions as well.

If my response helped please mark it correct and close the thread so that it benefits future readers.