- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎02-21-2024 06:09 AM
When we are working on inbound integration we build the scripted Rest API.
Is there any ServiceNow existing relation between oauth authentication between scripted Rest API?
I did not see any direct relation to point the oauth authentication from scripted rest api.
How to build the connection between oauth authentication and scripted Rest API?
example :
If third party application team hit the oauth endpoint they will get token and the same token they will use in the header and trigger the main endpoint with payload.
I am doubting if thirdpty team does not follow the process if they are trying hit main endpoint by using basic credentials ( which will provide to access the token api) without token.
even though the ServiceNow is allowed for operation from scripted rest API.
I know there are some ACL's available in scripted REST API but, that will only can be restricted by role base.
It can't check if the inbound call is using token or not.
Appreciate for your response:)
Thanks & Regards,
Ramanjaneyulu.
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎02-21-2024 11:07 AM
Take a look at this video, it helped me a lot:
https://www.youtube.com/watch?v=gqqA99rKBJU

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎02-21-2024 06:40 PM
Hi @Ramanjaneyulu ,
You should use the REST API access policy and REST API Auth scope feature. Jason's Video on this topic is an excellent resource for learning about it.
Thanks,
Randheer
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎02-21-2024 11:07 AM
Take a look at this video, it helped me a lot:
https://www.youtube.com/watch?v=gqqA99rKBJU
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎02-22-2024 03:57 AM
Hi Ademir,
Thanks a lot for your response!!!
Yeah you are these the YouTube link are very useful.
Just wanted to correct link address.
For my question it would be applicable for part 17.
https://youtu.be/W7VgnaVFmOw?si=GiQULLFnMEvVGPvu

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎02-21-2024 06:40 PM
Hi @Ramanjaneyulu ,
You should use the REST API access policy and REST API Auth scope feature. Jason's Video on this topic is an excellent resource for learning about it.
Thanks,
Randheer
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎02-22-2024 03:59 AM