---
sourceDocument: Zurich Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/platform-security

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# User Token Flow

# Third party token workflow for user accounts {#ariaid-title1}

Release version: Zurich  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
This workflow can be used to integrate third-party identity providers (IdPs) with ServiceNow® for secure API access. It allows client applications to obtain tokens directly from an IdP and use them to access ServiceNow APIs.

## Before you begin

Role required: <kbd class="ph userinput">admin</kbd>

## About this task

The third-party client application requests tokens directly from your identity provider (IdP). The authentication method between the client and the IdP is flexible and can be configured to meet your specific requirements. After successful authentication, the IdP issues an ID token. The token is sent directly to the client application, which then uses it to access ServiceNow APIs.  
Note:  
ServiceNow validates the token using the public key configured during setup and grants access to the requested APIs. Verify that the token is in JSON Web Token (JWT) format.
Figure 1. User Account Workflow  
Note:  
This diagram is for illustrative purpose. It shows the Authorization code grant flow between your client application and the identity provider. The workflow is flexible. You can use a different flow based on your requirements.

## Procedure

1. Configure your third party client application.  
   Set up your third party client application to request tokens directly from your identity provider (IdP). Select an authentication method that best fits your security and integration requirements.
2. Create an OAuth client in ServiceNow.  
   Provide the required details to enable validation of incoming tokens from your identity provider (IdP). For more information on how to configure, see [Configure a third party ID token](https://www.servicenow.com/docs/bbyj9co9bPqzf_oYlKPjLg "Configure a third-party ID token to enable secure authentication by verifying user identities through an external IdP. The third-party ID token improves security by reducing stored credentials, confirms seamless authentication, and supports interoperability with industry standards like OpenID Connect (OIDC).")