Asynchronous External Agents over Google A2A - ServiceNow as Secondary Agent

[HarshaSeetha]

Hi @warren_chan ,

Thanks for the information and for sharing the steps in the article. I’m trying to invoke/execute a ServiceNow AI Agent asynchronously via A2A from an external client, and for testing I’m using POSTMAN.

I have included the Instance Specifications below
Platform Version : Yokohama Patch 11
Application Version : Now Assist AI Agents, Version 6.0.23

I followed the same steps mentioned in the article to invoke the AI Agent asynchronously. In my instance, the Communication Mode is set to Asynchronous, the AI Agent A2A Messaging Channel is also set as asynchronous(I have Set Synchronous to false), and in AI Agent Studio the “Allow third party to access this agent” option is enabled. My Callback URL (Push Notification URL) is added and shows Verified in the External Agent Callback Registry. The A2A client currently doesn’t require authentication, so no credentials are configured in the connection record. 

I have attached the image of the External Agent Callback Registry where the URL is verified.

In the agent card of the AI Agent, under capabilities the pushNotifications is enabled

However, when I try invoking the AI Agent from POSTMAN, I keep getting the response "Push Notification is not Supported" with status code 400 stating Bad Request. I’ve also attached the request and response payload screenshot below for reference.

Could you please help me understand what might be causing this or if anything else needs to be configured or if something is missing in the request payload?

Thank you for your support in advance and please keep me notified if any further details required.

[warren_chan]

@HarshaSeetha we may have a bug on our side, trying to work through it quickly. More to come. Thanks for trying the feature so soon 😂

[warren_chan]

Update: The issue on the validate URL not working should be addressed in Now Assist AI Agents 7.1.x, to be released next month.

[Rahul Chand]

Hi @warren_chan ,

I am currently setting up an Agent-to-Agent (A2A) integration between two ServiceNow instances. I am acting as the secondary agent and have run into a roadblock.

Steps Taken:

1. Successfully verified the External Agent Callback Registry URL in the secondary instance using the required authentication.

2. Attempted to trigger the send/message method from the host instance external agent.

3. As a troubleshooting step, I re-discovered the secondary agent after verifying the URL.

The Issue: Despite the successful verification and re-discovery, triggering the send/message method consistently returns the following error: "Push Notification is not supported"

Could you please point me in the right direction to resolve this?

[warren_chan]

Hi @Rahul Chand , the fix for this is coming on April 9 as part of Now Assist AI Agents 7.1.x release.

[HarshaSeetha]

Hi @warren_chan 

Could you please help me with the below queries?

1.   When an external system sends a JSON‑RPC request to connect with an AI Agent, is it possible to pass additional data in the request payload (apart from the prompt)?
For example, can we include email‑related details or other contextual data in the JSON‑RPC payload so that the AI Agent can access and use it within its tools during processing?

2.   In ServiceNow, is there a way to trace or validate the complete response payload (full JSON body) that the AI Agent sends to an external system or agent webhook, apart from checking the Execution Plans (sn_aia_execution_plan) table?

[warren_chan]

@HarshaSeetha - You are free to add whatever you want to the JSON-RPC payload, so long as it is compliant with the Google Agent2Agent protocol specification. You likely need to pass additional context in the message, task or artifact blocks to make it workable. The Google A2A specification provides additional detail on how each of these components is to be used.

Use the External Agent Execution History [sn_aia_external_agent_exec_history] table to view inbound and outbound request payloads - it should be pretty straightforward when you are examining those records.

[HarshaSeetha]

Hi @warren_chan ,

We have a host application where users log in and are authenticated using Microsoft Entra ID B2C. A single App Registration is configured in Entra ID B2C, through which an ID token and refresh token are generated upon user login. Using the refresh token, we generate a new access token.

This access token is successfully used to call ServiceNow Scripted REST APIs, and user identity is maintained correctly. On the ServiceNow side, an OIDC Identity Provider is configured and working as expected for these Scripted REST API calls.

However, when we attempt to use the same access token (to maintain user identity) to invoke the ServiceNow AI Agent via the A2A protocol from an external system/agent, authentication fails with an error indicating that the user is not authenticated.

I would like to understand whether this scenario is supported and, if so, how invoking the ServiceNow AI Agent using the same Microsoft Entra ID B2C access token while preserving user identity can be achieved ?