---
sourceDocument: Australia Workflow Data Fabric
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/integrate-applications

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Workflow Data Fabric

ft:clusterId :

    - crint

bundleId :

    - crint

workflow :

    - Creator


---

# Set up the Oracle Cloud IAM spoke

# Set up the Oracle Cloud IAM spoke {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read  
Integrate the ServiceNow instance and Oracle Cloud IAM
by using the OCI SHA256WithRSA Signature credentials to authenticate ServiceNow requests.

## Before you begin

* Request an Integration Hub subscription.
* Activate the Oracle Cloud IAM spoke.
* Role required: admin
{#setup-oracle-iam__ul_agy_qxd_rlb}

## Create a Java KeyStore (JKS) certificate {#ariaid-title2}

Use the keytool utility to generate, import, and export certificates.

### Before you begin

* Make sure that the keytool utility is installed on your computer.
* Role required: admin
{#create-jks-cert-oracle-iam__ul_lx1_5fx_nsb}

### Procedure

1. Change to the directory where the certificate is to be saved.  
   By default, keytool creates a keystore file in the directory where the keystore commands are run.
2. Enter the following keytool command to generate the certificate in the keystore file, keystore.jks:  
   `keytool -genkeypair -alias <mycertificate> -keyalg RSA -keysize 2048 -validity 365 -keystore keystore.jks -storepass your_keystore_password -keypass your_key_password`  
   Note:  
   Replace the placeholders \<mycertificate\>, \<your_keystore_password\>, and \<your_key_password\> with your certificate name, keystore password, and key password in all the sample commands.
3. Enter your first name and last name, organization, and other details in the keytool prompt.  
   These details are required for generating the certificate.
4. Enter the following commands in the following sequence.  

       keytool -export -alias sample -storepass <storepassword> -file server.cer -keystore keystore.jks
       keytool -import -v -trustcacerts -alias sample -file server.cer -keystore cacerts.jks -keypass <keypassword> -storepass <storepassword>
       keytool -export -alias sample -keystore keystore.jks -rfc -file public.cert
       keytool -export -alias sample -keystore keystore.jks -rfc -file certificate.pem
       keytool -list -rfc -keystore keystore.jks -alias sample -storepass <storepassword>
       keytool -importkeystore -srckeystore keystore.jks -destkeystore keystore.p12 -deststoretype PKCS12 -srcalias <alias> -deststorepass <storepassword> -destkeypass <keypassword>
       openssl pkcs12 -in keystore.p12 -nokeys -out cert.pem
       openssl pkcs12 -in keystore.p12 -nodes -nocerts -out PrivateKey.pem
       openssl rsa -in key.pem -pubout -out PublicKey.pem
       keytool -list -v -keystore keystore.p12 -storetype PKCS12 -storepass <storepassword>

   Verify the generated keystore.jks file in the target directory.
5. Enter the following command to extract public key from the Java Keystore file.  
   `openssl x509 -pubkey -noout -in cert.pem >
   publickey.pem`

## Create X.509 certificate for the Oracle Cloud IAM spoke {#ariaid-title3}

You must create a X.509 certificate and attach the Java Keystore file to it. This
certificate is used for connecting to Oracle Cloud IAM.

### Before you begin

Role required: admin.

### Procedure

1. Navigate to AllSystem DefinitionCertificates.
2. Click New.
3. In the form, fill in these fields.  
   {#create-x509-certificate-oracle-iam__table_aj3_ktq_qnb__entry__2}

   | Field | Description |
   |-|-|
   | Name | Unique name to identify the certificate. For example, <kbd class="ph userinput">OCI IAM certificate</kbd> |
   | Type | Type of the certificate. Select Java Key Store. |
   | Notify on expiration | List of persons who are to be notified when a ceritificate is about to expire. |
   | Keystore password | Password of the keystore. |
   | Warn in days to expire | Number of days when a warning is sent to the user before the certificate expires. |
   | Active | Option to make the certificate active. |
   | Short description | Short description for the keystore. |
   [Table 1. X.509 Certificate form]

   {#create-x509-certificate-oracle-iam__table_aj3_ktq_qnb}
4. Click the attachments icon and upload the keystore.jks file.
5. Click Validate Stores/Certificates.

## Create a credential record for the Oracle Cloud IAM spoke {#ariaid-title4}

Create a credential record for the Oracle Cloud IAM account. The Oracle Cloud IAM spoke connection and credential alias uses these credentials to authorize
actions.

### Before you begin

Use the public key from the Java Keystore (JKS) file and generate a fingerprint from your Oracle Cloud account. For more information about fingerprint, see [Required Keys and OCIDs](https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/apisigningkey.htm#three).

Role required:
admin.

### Procedure

1. Navigate to AllConnections \& CredentialsCredentials.
2. Click New.  
   The system displays this message: What type of Credentials would you like to create?
3. Select OCI SHA256WithRSA Signature.
4. On the form, fill these values.  
   {#create-cred-oracle-iam-spoke__table_bcs_qjb_qnc__entry__2}

   | Field | Description |
   |-|-|
   | Name | Name to uniquely identify the record. For example, Oracle IAM Cloud Cred. |
   | Certificate Sys ID | Sys ID of the OCI Signing Certificate. |
   | Alias | Alias of the KeyStore. |
   | Alias Password | Alias password of the KeyStore. |
   | Key ID | Key ID helps identify which key is used when multiple keys are used to sign tokens. The Key ID must be slash (/) separated values of Tenancy OCID, User OCID, and Fingerprint in this format:<kbd class="ph userinput"> ocid1.tenancy.oc1..&lt;unique_ID&gt;/ocid1.user.oc1..&lt;unique_ID&gt;/&lt;key_fingerprint&gt;</kbd>. |
   | Applies to | Option to specify if the credential applies to all MID Servers in the network. |
   | Active | Option to actively use the credential record. |
   | Authentication Algorithm | Custom authentication algorithm for outbound signing requests. Select <kbd class="ph userinput">OCI SHA256RSA Signing Algorithm</kbd> |
   [Table 2. OCI SHA256WithRSA Signature Credentials form]

   {#create-cred-oracle-iam-spoke__table_bcs_qjb_qnc}
5. Right-click the form header and click Submit.
{#create-cred-oracle-iam-spoke__steps_oqn_bq4_qnb}

## Create a connection record for the Oracle Cloud IAM spoke {#ariaid-title5}

Create a connection record for your Oracle Cloud IAM account. The Oracle Cloud IAM spoke connection and credential aliases
use these connections to perform actions in Oracle Cloud IAM.

### Before you begin

Role required: admin.

### Procedure

1. Navigate to AllConnections \& CredentialsConnections \& Credentials Aliases.
2. Open the alias record for OracleIAM_credentialANDconnecton.
3. From the Connections tab, click New.
4. On the form, fill these fields.  
   {#create-conn-cred-alias-oracle-iam-spoke__table_ywc_h3g_qbn__entry__2}

   | Field | Description |
   |-|-|
   | Name | Name to uniquely identify the record. For example, <kbd class="ph userinput">Oracle IAM conn</kbd>. |
   | Credential | Credential record created for Oracle Autonomous DB spoke. For example, <kbd class="ph userinput">Oracle IAM Cred</kbd>. |
   | Connection alias | Alias record associated with this connection. Search and select <kbd class="ph userinput">sn_oci_iam_spoke.OracleIAM_credentialAN</kbd> |
   | Connection URL | Base URL to connect to Oracle Cloud IAM. For example, <kbd class="ph userinput">https://database.ap-mumbai-1.oraclecloud.com</kbd>. |
   | Active | Option to actively use the connection record. |
   | Domain | Domain that the action runs in. |
   [Table 3. Connection form]

   {#create-conn-cred-alias-oracle-iam-spoke__table_ywc_h3g_qbn}
5. Click Submit.
{#create-conn-cred-alias-oracle-iam-spoke__steps_e4x_vq4_qnb}

*[\>]: and then