---
sourceDocument: Zurich Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/platform-security

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# API authentication

# API authentication {#ariaid-title1}

* Release version: Zurich
* 
* Updated July 31, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Authentication configurations for API.

API based Authentication in ServiceNow®'s validates the identity of a user who accesses an instance, and then authorizes the user to features that match the user's role or job function while making an API call to the ServiceNow® instance.

Following are the types of API Authentication in ServiceNow®:

* [Certificate based authentication](https://www.servicenow.com/docs/0fW55th6bdRBbTYCzMAvlA "Certificate-based authentication lets you mutually authenticate inbound API requests using certificates from a trusted Certificate Authority (CA).")
* [OAuth](https://www.servicenow.com/docs/yE~wLTuf77YzjY~Oe4OYig "OAuth based authentication validates the identity of the client that attempts to establish a trust on the system by using an authentication protocol.")
* [Token-based authentication](https://www.servicenow.com/docs/WDXKD9_aBN0a~D~V833JZw "Token-based authentication for inbound REST APIs configuration using API Key or HMAC.")
{#api-authentication__ul_ywb_32b_tzb}