Connection and credential alias for personal authentication in Policy authoring

  • Release version: Australia
  • Updated June 5, 2026
  • 1 minute to read

    • The Microsoft OneDrive Spoke connection and credential alias controls how policy authoring operations authenticate with Microsoft SharePoint and Google Drive. Understanding the alias structure helps you configure and switch between system and personal authentication.

    When the Microsoft OneDrive Spoke is installed, the platform ships a default Connection & Credential alias record named OneDrive with the ID, sn_onedrive_spoke.OneDrive. All policy authoring flows that interact with SharePoint or OneDrive reference this alias. The alias contains a connection record, an associated credential, and one or more child aliases that enable switching between different service accounts or authentication modes.

    Alias record fields

    The following fields are relevant to policy authoring configuration on the sn_onedrive_spoke.OneDrive alias record.
    Table 1. Alias record fields
    Field Value Description
    Name OneDrive Display name of the alias record.
    ID sn_onedrive_spoke.OneDrive Unique system identifier for the alias. Referenced by all OneDrive and SharePoint flows for policy authoring.
    Application Microsoft OneDrive Spoke The spoke application that owns this alias record.
    Type Connection and Credential Indicates that the alias stores both connection and credential information.
    Connection Type HTTP The protocol used for API calls to Microsoft endpoints (graph.microsoft.com).

    Microsoft OneDrive Spoke Credential fields

    The connection record linked to the alias references an OAuth 2.0 Credentials record named Microsoft OneDrive Spoke Credential. The following fields on this credential record are relevant to personal authentication configuration.
    Table 2. Credential fields
    Field Options Description
    Integration Type System (default) | Personal

    Controls which credentials are used when policy authoring operations make API calls to Microsoft or Google.

    • System: All operations use the shared service account credentials. Documents created or modified from ServiceNow are registered under the service account identity in the cloud location. This is the default behavior.
    • Personal: Create, connect, and upload operations use the logged-in user's personal OAuth credentials. Documents are registered under the individual user's identity, enabling audit traceability. Document access permission grants and content sync (Update link) continue to use system account credentials regardless of this setting.
    OAuth Entity Profile OneDrive OAuth The OAuth profile that defines the authorization server, client ID, client secret, and token endpoints used to generate and refresh OAuth tokens.

    Supported cloud locations

    Personal authentication is supported for the following cloud locations used in policy authoring:

    • Microsoft SharePoint
    • Google Drive

    Personal authentication is not supported for Microsoft OneDrive.