Using OAuth the right way for inbound integration in ServiceNow

[Ravish Shetty]

Hi all,

I am new to OAuth. For inbound integration, do we need to provide username and password to an external platform to retrieve access token and refresh token?

I have seen videos on Youtube on OAuth tutorial in ServiceNow and it mostly shows how to retrieve token using username and password.

Outside of ServiceNow, as an end user who is giving permission to something like Gmail to a third party, I never provide username and password to the third party and so it feels odd that for ServiceNow's OAuth setup, we need to provide username and password since I believe that is the idea that we should do away from username and password or am I thinking of this wrong?

Thanks,

Ravish

[Tanushree Maiti]

Hi @Ravish Shetty 

Yes, You need to initially provide ServiceNow user credentials (username and password) for Oauth to work  and to  get the access and refresh tokens.

Create a  integration user with inline password . Give the required role.

Now  Access Token can be generated using this credential and End point (API).