---
sourceDocument: Brazil Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Configure OAuth in Veza

# Configure OAuth in Veza {#ariaid-title1}

Release version: Brazil  
Updated September 8, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Create an OAuth 2.0 client and an OAuth 2.0 app in your Veza tenant so that AI Control Tower can authenticate to Veza using OAuth 2.0 instead of an API key.

## Before you begin

Role required: Admin access to your Veza tenant

## About this task

AI Control Tower uses two separate Veza OAuth 2.0 credentials: an OAuth 2.0 client for the client credential grant, and an OAuth 2.0 app for the authorization code grant. Create the OAuth 2.0 client for
system-level (client credential) access, and the OAuth 2.0 app for per-user (authorization code) access, or both if you want to switch between them later. For more information, see [Configure OAuth for Veza in ServiceNow](https://www.servicenow.com/docs/eIK_L7EyQZq4B0e987rX2g "Set up two application registries, their OAuth entity scopes and credentials, then link them to the pre-provided connection alias, so that AI Control Tower can authenticate to Veza using OAuth 2.0.").

## Procedure

1. In your Veza tenant, navigate to AdministrationAPI Keys.
2. Create a new OAuth 2.0 client for the client credential grant.  
   Note the client secret when you create it. Veza doesn't show it again. Set the scope to servicenow:aict:read. For more information, see [OAuth2 clients](https://docs.veza.com/4yItIzMvkpAvMVFAamTf/developers/api/authentication/oauth2-clients) in Veza documentation.
3. Create a new OAuth 2.0 app for the authorization code grant.  
   Set the base URL to your ServiceNow instance URL, allow any redirect URL, and set the scope to servicenow:aict:read. For more information, see [OAuth2 apps](https://docs.veza.com/4yItIzMvkpAvMVFAamTf/developers/api/authentication/oauth2-apps) in Veza documentation.
{#gov-sec-configure-veza-oauth__steps_veza_oauth}

## Result

Note the client ID and client secret for both the OAuth 2.0 client and the OAuth 2.0 app. You need these values to configure OAuth on the ServiceNow platform. See [Configure OAuth for Veza in ServiceNow](https://www.servicenow.com/docs/eIK_L7EyQZq4B0e987rX2g "Set up two application registries, their OAuth entity scopes and credentials, then link them to the pre-provided connection alias, so that AI Control Tower can authenticate to Veza using OAuth 2.0.").

*[\>]: and then