Configure a JWT provider

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read
  • Configure a JWT provider on the ServiceNow AI Platform to configure an OAuth application profile to authenticate using certificates.

    Before you begin

    Upload a Java Key Store (JKS) certificate. Attach a JKS certificate containing the certificate uploaded on Microsoft Azure to your instance to use when enabling the JWT client authentication. For more information, see Upload Java Key Store certificate.

    Create a JWT signing key to assign to your JKS certificate. For more information, see Configure a JWT signing key.

    Role required: admin

    Procedure

    1. Add a JWT provider to your ServiceNow instance and fill in the claim values.
      Claim Name Claim Value
      aud https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token
      Note:
      The tenant ID should be replaced with the directory ID copied from Microsoft Azure.
      iss Client ID copied from Microsoft Azure
      sub Client ID copied from Microsoft Azure
      For more information, see Create a JWT provider with a JWT signing key.
    2. From the JWT Provider record menu, select Copy sys_id and copy the JWT provider sys_id.

    What to do next

    Generate a SHA-1 thumbprint