---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# JWT Grant

# JSON Web token bearer grant {#ariaid-title1}

Release version: Brazil  
Updated November 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Configuring an OAuth JSON Web Token (JWT) bearer grant secures token-based authentication without user interaction. Use this flow when a client application needs secure, unattended access to ServiceNow resources, either as itself or on behalf of a user.  
The client application generates a signed JWT that includes identity-related claims, such as the user or system it represents. It sends it to the ServiceNow instance to request an access token.

Ideal for:
:   Client applications that need secure access to ServiceNow resources---either on behalf of a user or as themselves---without requiring user interaction or storing a shared secret.

How it works:
:   The client application creates a signed JWT (JSON Web Token) that includes identity-related claims---such as the user or system it represents---and presents it to the ServiceNow instance to request an access token.

## JWT Structure {#jwt-bearer-grant__section_jpv_rzt_xfc}

The JWT must be signed using the client's private key. It must include the following standard claims:

* iss -- Issuer (client ID)
* sub -- Subject (user or system identity)
* aud -- Audience (ServiceNow token endpoint)
* exp -- Expiration time
* iat -- Issued at

{#jwt-bearer-grant__ul_stl_vzt_xfc}  
Note:  
ServiceNow uses the public key (uploaded in the OAuth JWT profile) to validate the signature and maps the sub claim to a user record.
**Related tasks**   

* [JSON Web token grant workflow](https://www.servicenow.com/docs/45Zr8YVUdWDDBYAPZ1EqaQ "Configuring an OAuth JSON Web Token (JWT) bearer grant secures token-based authentication without user interaction.")
* [Configure an OAuth JSON web token bearer grant](https://www.servicenow.com/docs/VF~PD1ujeMFVgayde_BNKg "Configuring an OAuth JSON Web Token (JWT) bearer grant secures token-based authentication without user interaction. It enhances security with signed JWTs and reduces authentication overhead by eliminating repeated login attempts.")