---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Third Party Token Grant

# Third party token grant {#ariaid-title1}

Release version: Brazil  
Updated November 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The third party token grant enables ServiceNow to accept identity tokens from trusted external identity providers, such as Azure AD or Okta. Third party token grant provides secure, token-based access. This method supports secure access and
single sign-on (SSO) in federated authentication scenarios.

Ideal for:
:   Federated authentication scenarios where ServiceNow trusts identity tokens issued by external identity providers such as Azure AD or Okta.

How it works:
:   The client application obtains an ID token from a trusted third-party identity provider and includes it in the Authorization header when making API requests to the ServiceNow instance to validate the token and, if trusted, grants access based on the identity it asserts---enabling seamless single sign-on (SSO) and federated authentication across systems.

To know more about how to use accounts from a third-party identity provider (IdP) to access the ServiceNow API, see [Third party token workflow for user accounts](https://www.servicenow.com/docs/ZmaKVeg_xZLzmR3jy~R8Ig "This workflow can be used to integrate third-party identity providers (IdPs) with ServiceNow for secure API access. It allows client applications to obtain tokens directly from an IdP and use them to access ServiceNow APIs.").