---
sourceDocument: Xanadu Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/platform-security

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# API Authentication

# API Authentication {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Authentication configurations for API.

API based Authentication in ServiceNow®'s validates the identity of a user who accesses an instance, and then authorizes the user to features that match the user's role or job function while making an API call to the ServiceNow® instance.

Following are the types of API Authentication in ServiceNow®:

* [Certificate based authentication](https://www.servicenow.com/docs/Mc_fPvW1jdz57I6CBH941w "Certificate-based authentication lets you mutually authenticate inbound API requests using certificates from a trusted Certificate Authority (CA).")
* [OAuth](https://www.servicenow.com/docs/pdkMcXm8Ae0ArmyN94gm8g "OAuth based authentication validates the identity of the client that attempts to establish a trust on the system by using an authentication protocol.")
* [Token-based authentication](https://www.servicenow.com/docs/p27j~QX8Pg32UtJWZrwIeg "Token-based authentication for inbound REST APIs configuration using API Key or HMAC.")
{#api-authentication__ul_ywb_32b_tzb}