---
sourceDocument: Yokohama API Reference
sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/api-reference

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama API Reference

ft:clusterId :

    - crapiref

bundleId :

    - crapiref

workflow :

    - Creator


---

# Enable OAuth with inbound REST

# Enable OAuth with inbound REST {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Using OAuth, you can pass a user ID and password once, and then use a token for
subsequent REST requests instead of submitting credentials with each request.

## About this task

OAuth can improve system security by reducing the number of times you submit user credentials. You can use OAuth to authenticate REST requests.

## Procedure

1. Activate the OAuth 2.0 plugin.  
   See [Activate a plugin](https://www.servicenow.com/docs/access?context=t_ActivateAPlugin&version=yokohama&pubname=yokohama-platform-administration&ft:locale=en-US) to learn how to activate plugins.
2. Set the system property com.snc.platform.security.oauth.is.active to true.
3. Navigate to System OAuth \> Application Registry.
4. Click New and then click Create an OAuth API endpoint for external clients.
5. Record the client_id and client_secret values from the previous step to use when requesting an access token.  
   Note:  
   The example shown is about creating OAuth API endpoint using password grant type. You can also configure OAuth API endpoint using other grant types. For more information, see [OAuth Inbound](https://www.servicenow.com/docs/access?context=oauth-inbound&version=yokohama&pubname=yokohama-platform-security&ft:locale=en-US).
6. To get an access token, use your REST client, such as cURL or Postman, to send a request to the OAuth endpoint (`oauth_token.do`).  
   Format the request as a URL-encoded HTTP POST body and include the required
   parameters.
7. Record the access token and refresh token from the response.
8. Submit the access token with subsequent REST requests.
* **[REST OAuth example](https://www.servicenow.com/docs/bOY97aQO1ZpdtmKhBz4TRA)**   
  This example shows how to authenticate an inbound REST request using OAuth.