---
sourceDocument: Brazil Workflow Data Fabric
sourceDocumentLink: https://www.servicenow.com/docs/r/integrate-applications

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Workflow Data Fabric

ft:clusterId :

    - crint

bundleId :

    - crint

workflow :

    - Creator


---

# Set up the Google Cloud Translator Service spoke

# Set up the Google Cloud Translator Service spoke {#ariaid-title1}

Release version: Brazil  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 5 minutes to read  
Integrate your Google account
with your ServiceNow
instance.

## Before you begin

* Request an Integration Hub subscription.
* Activate the Google Cloud Translator Service spoke.
* Create a service account on Google Cloud, generate a service account key of JSON type and download it. For information on creating the service account key, see the [Google](https://cloud.google.com/docs/authentication/getting-started#creating_a_service_account) documentation.
* Enable the Cloud Translation API service. For information on enabling a service, see the [Google](https://cloud.google.com/service-usage/docs/enable-disable#enabling) documentation.
* Role required: admin
{#setup-google-translator__ul_s3w_kfh_cjb}

## Create a Java KeyStore certificate {#ariaid-title2}

Encrypt the security certificates obtained from Google by creating a Java KeyStore
(JKS) file.

### Before you begin

* Role required: admin
* Download a JSON file containing the service account key from Google. For information on downloading the JSON file, see the [Google](https://cloud.google.com/docs/authentication/getting-started#creating_a_service_account) documentation. Following is a sample JSON file:

      {
        "type": "service_account",
        "project_id": "primeval-nectar-242610",
        "private_key_id": "0c6c7b1511f1c236c1300c5933d528bbf45314e5",
        "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n",
        "client_email": "service-now-google-trans-v3@primeval-nectar-242610.iam.gserviceaccount.com",
        "client_id": "113255944370425109391",
        "auth_uri": "https://accounts.google.com/o/oauth2/auth",
        "token_uri": "https://oauth2.googleapis.com/token",
        "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
        "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-now-google-trans-v3%40primeval-nectar-242610.iam.gserviceaccount.com"
      }

{#create-jks-google__ul_fww_gn3_cjb}

### Procedure

1. In the JSON file, perform the following for the `private_key` value.
   1. Unescape the `\n` characters.  
      Tip:  
      To unescape characters in a JSON file, you can parse a JSON string into a JavaScript object.
   2. Store the private key in a file with .pem extension.
   {#create-jks-google__substeps_ebp_qz4_zlb}
2. In the JSON file, perform the following for the `client_x509_cert_url` value.
   1. Open the link specified for `client_x509_cert_url`.
   2. Unescape the `\n` characters for the certificate associated with the private_key_id mentioned in the JSON file.
   3. Store the certificate value in a file with .pem extension.
   {#create-jks-google__substeps_nms_tz4_zlb}
3. Use the openssl command to create a PKCS 12 file using the recently created private key and certificate files.  

       openssl pkcs12 -export -in [path to certificate] -inkey [path to private key] -certfile [path to certificate ] -out testkeystore.p12

   For example, if certificate.pem is the certficate and privatekey.pem is the
   private key:

       openssl pkcs12 -export -in certificate.pem -inkey privatekey.pem -certfile certificate.pem -out testkeystore.p12

   A PKCS 12 file, testkeystore.p12, is created.
4. Specify an export password or source keystore password.  
   Note:  
   You should specify this password when creating a JWT key for Google Cloud Translator Service spoke.
5. Use the keytool command to create a JKS file from the PKCS 12 file.  

       keytool -importkeystore -srckeystore testkeystore.p12 -srcstoretype pkcs12 -destkeystore wso2carbon.jks -deststoretype JKS

   Note:  
   testKeyStore.p12 is the PKCS 12 file and wso2carbon.jks is the JKS file.
6. Specify a destination keystore password.  
   Note:  
   You should specify this password when attaching a JKS certificate to Google Cloud Translator Service spoke.

## Attach a Java KeyStore certificate to Google Cloud Translator Service spoke {#ariaid-title3}

Enable the JWT client authentication by attaching a valid Java KeyStore (JKS)
certificate to Google Cloud Translator Service spoke.

### Before you begin

* Role required: admin
* Valid Java KeyStore certificate
{#attach-jks-google-translator__ul_ysf_whh_cjb}

### Procedure

1. Navigate to AllSystem DefinitionCertificates.
2. Click New.
3. On the form, fill in the fields.  
   {#attach-jks-google-translator__table_hvh_4tt_xgb__entry__2}

   | Field | Description |
   |-|-|
   | Name | Identifier of the certificate. |
   | Notify on expiration | Users to be notified when the certificate expires. |
   | Warn in days to expire | Number of days to send a notification before the certificate expires. |
   | Active | Option to activate the certificate. |
   | Type | Type of the certificate. Select Java Key Store. |
   | Expires in days | Number of days until the certificate expires. |
   | Key store password | Password to access the certificate. Use the destination keystore password specified when creating the JKS certificate. For more information on this password, see [Create a Java KeyStore certificate](https://www.servicenow.com/docs/bEC_VTjrDvNPw9QP3PWz5g#create-jks-google "Encrypt the security certificates obtained from Google by creating a Java KeyStore (JKS) file."). |
   | Short description | Summary about the certificate. |
   [Table 1. X.509 Certificate form fields]

   {#attach-jks-google-translator__table_hvh_4tt_xgb}
4. Click the manage attachments icon (![Attachments icon]()) and attach a JKS certificate.
5. To validate the JKS certificate, click Validate Stores/Certificates.
6. Click Submit.
{#attach-jks-google-translator__steps_dsw_13h_cjb}

## Create a JWT signing key for Google Cloud Translator Service spoke {#ariaid-title4}

Assign a JSON Web Token (JWT) signing key to your Java KeyStore
certificate.

### Before you begin

Role required: admin

### Procedure

1. Navigate to AllSystem OAuthJWT Keys.
2. Click New.
3. On the form, fill in the fields.  
   {#create-jwtkey-google__table_jky_dk5_xgb__entry__2}

   | Field | Description |
   |-|-|
   | Name | Identifier of the JWT signing key. |
   | Signing Keystore | Valid JKS certificate for which you want to assign the key. |
   | Key Id | Key ID to identify which key is used when multiple keys are used to sign tokens. |
   | Signing Algorithm | Algorithm to sign with the key. |
   | Signing Key Password | Password associated with the key. Use the export password or the source keystore password specified when creating the JKS certificate. For more information on this password, see [Create a Java KeyStore certificate](https://www.servicenow.com/docs/bEC_VTjrDvNPw9QP3PWz5g#create-jks-google "Encrypt the security certificates obtained from Google by creating a Java KeyStore (JKS) file."). |
   | Active | Option to activate the key. |
   [Table 2. JWT Keys form fields]

   {#create-jwtkey-google__table_jky_dk5_xgb}
4. Click Submit.
{#create-jwtkey-google__steps_ons_3lh_cjb}

## Create a JWT provider for Google Cloud Translator Service spoke {#ariaid-title5}

Add a JSON Web Token (JWT) provider to Google Cloud Translator Service spoke.

### Before you begin

Role required: admin

### Procedure

1. Navigate to AllSystem OAuthJWT Providers.
2. Click New.
3. On the form, fill in the fields.  
   {#create-jwtprovider-google__table_xwf_rmh_cjb__entry__2}

   | Field | Description |
   |-|-|
   | Name | Identifier of the JWT provider. |
   | Expiry Interval (sec) | Number of seconds that indicate the lifespan of the JWT provider token. Specify <kbd class="ph userinput">3600</kbd>. |
   | Signing Configuration | JWT signing key. |
   [Table 3. JWT Provider form fields]

   {#create-jwtprovider-google__table_xwf_rmh_cjb}
4. Right-click the form header, and click Save.
5. In the Standard Claims related list, enter the values for these claims.  
   {#create-jwtprovider-google__table_lhv_fq3_cjb__entry__2}

   | Claim name | Claim value |
   |-|-|
   | aud | https://www.googleapis.com/oauth2/v4/token |
   | iss | client_email value from the JSON file. |
   [Table 4. Claim]

   {#create-jwtprovider-google__table_lhv_fq3_cjb}
6. In the Custom Claims related list, create the scope claim and enter its value as <kbd class="ph userinput"> https://www.googleapis.com/auth/cloud-translation</kbd>.
7. Click Update.
{#create-jwtprovider-google__steps_wwf_rmh_cjb}

## Configure the credential for the GoogleTranslation alias {#ariaid-title6}

Authorize actions of Google Cloud Translator Service spoke by configuring the Google OAuth 2.0 credential.

### Before you begin

Role required: admin

### Procedure

1. Navigate to AllConnections \& CredentialsCredentials.
2. Select the Google OAuth 2.0 credential.
3. Open the record specified in the OAuth Entity Profile field.
4. In the JWT Provider field, specify the JWT provider that you want to use.
5. Click Update.
6. To verify if an OAuth Access token is generated to connect to Google's translation services, click the Get OAuth Token related link of the Google OAuth 2.0 credential.

## Configure the connection attributes for the GoogleTranslation alias {#ariaid-title7}

Connect to the Google's translation service by configuring the Google connection.
Provide information that is used by HTTP(s) actions or activities to connect to that
service.

### Before you begin

Role required: connection_admin

### Procedure

1. Navigate to AllConnections \& CredentialsConnections.
2. Open for the record for Google.
3. In the Attributes related list of the HTTP(S) Connection form, fill in the fields.  
   {#configure-connection-google__table_any_shp_gfb__entry__2}

   | Field | Value required |
   |-|-|
   | location | Location of the customer. If the value is not specified when creating an account on Google Cloud, then specify <kbd class="ph userinput">global</kbd>. |
   | project_id | Identifier of a project. Specify the project_id value from the JSON file. |
   | version | API version that the related spokes are built for. The default value is <kbd class="ph userinput">v3beta1</kbd>. Because Google now supports the v3 version, you can override this value as <kbd class="ph userinput">v3</kbd>. |
   [Table 5. HTTP(S) Connection form fields]

   {#configure-connection-google__table_any_shp_gfb}
4. Right-click the form header and click Save.
{#configure-connection-google__steps_kyk_1rh_cjb}

*[\>]: and then