---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# OIDC Provider Configuration and OAuth Protected Resource fields

# OIDC Provider Configuration and OAuth Protected Resource fields {#ariaid-title1}

Release version: Brazil  
Updated November 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Reference for the fields on the OIDC Provider Configuration and OAuth Protected Resource records used to register an external authorization server for the ServiceNow MCP Server.

## OIDC Provider Configuration fields {#mcp-3p-auth-reference__mcp-external-auth-reference-oidc}

{#mcp-3p-auth-reference__mcp-external-auth-reference-oidc__entry__2}

| Field | Description |
|-|-|
| OIDC Provider | The name of the external authorization server configuration. |
| Active | When selected, the configuration is in effect and the provider is a trusted token issuer. |
| Issuer URI | The issuer identifier of the external authorization server. The instance matches the issuer claim on an incoming token against this value. |
| OIDC Metadata URL | The provider's OIDC metadata discovery endpoint, used to retrieve the provider's signing keys and configuration. |
| Enable JTI claim verification | When selected, the instance verifies the JTI claim on incoming tokens. |
| JTI Claim | The name of the token claim that carries the JTI value. |
| OIDC Configuration Cache Life Span | How long the instance caches the provider's OIDC metadata. |
| SSO Only |   |
| User Claim | The token claim used to identify the user. |
| User Field | The ServiceNow user field that the User Claim value is matched against. For example, this is set to email. |
[ ]

## OAuth Protected Resource fields {#mcp-3p-auth-reference__mcp-external-auth-reference-resource}

{#mcp-3p-auth-reference__mcp-external-auth-reference-resource__entry__2}

| Field | Description |
|-|-|
| Resource Name | A display name for the protected resource. |
| Resource Identifier | The identifier of the protected resource, advertised in the Protected Resource Metadata. |
| Active | When selected, the resource is active. |
| Application | The application scope the resource belongs to. |
| Allowed Glide APIs | The Glide APIs an authenticated client is allowed to call for this resource. |
| Allow Glide as Authorization Server | When selected, the ServiceNow authorization server can also issue tokens for this resource, and any registered external authorization servers. |
| Allowed Services |   |
| Bearer Methods Supported | How the bearer token is presented on a request. For example, this is set to header. |
| Scopes Supported | The scopes advertised for the resource in the Protected Resource Metadata. |
| Domain | The domain the resource record belongs to. |
[ ]