Difference between types of OAuth 2.0

[Abhijit Das7]

Hi Everyone,

I am working on OAuth 2.0 , But getting confused in between Create an OAuth API endpoint for external clients and Connect to a third party OAuth Provider . Can any one please explain me the difference between both.

Thanks

Virendra

[Vipul Sethi]

 Create an OAuth API endpoint for external clients This option will be selected when you want servicenow to act as oAuth provider,  which means servicenow will provide oauth token for authenticating the inbound integration calls. For example if an external app want to integrate with servicenow and they need to use servicenow table api for which they will use oauth for authenticating servicenow endpoint rather then basic authentication.

Connect to a third party OAuth Provider  This option will be used when you want servicenow to act as Oauth consumer, For example servicenow will use third party oauth provider to generate token for authenticating external app endpoint in order to send outbound integration call.  

[Abhijit Das7]

Hi @Vipul Sethi 

Can you please give me brief intro about these all methods:

Create an OAuth API endpoint for external clients

Connect to a third party OAuth Provider

Configure an OIDC provider to verify ID tokens.

Connect to an OAuth Provider (simplified)

Thanks 

Virendra

[Vipul Sethi · Accepted solution]

 Create an OAuth API endpoint for external clients This option will be selected when you want servicenow to act as oAuth provider,  which means servicenow will provide oauth token for authenticating the inbound integration calls. For example if an external app want to integrate with servicenow and they need to use servicenow table api for which they will use oauth for authenticating servicenow endpoint rather then basic authentication.

Connect to a third party OAuth Provider  This option will be used when you want servicenow to act as Oauth consumer, For example servicenow will use third party oauth provider to generate token for authenticating external app endpoint in order to send outbound integration call.  

Configure an OIDC provider to verify ID tokens.  This option is used to connect opend id provider (OIDC) where servicenow will be oauth consumer and the authentication will based on JWT token for inbound integration calls.

Connect to an OAuth Provider (simplified) This is same as connect to third party oAuth provider, only difference that it will show a simplified form view with less advanced option like oauth script/ use mutual authentication etc

[Abhijit Das7]

Hi @Vipul Sethi 

Thank you for the information.