Using the Personal Authentication dashboard

  • Release version: Australia
  • Updated March 12, 2026
  • 3 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Using the Personal Authentication dashboard

    The Personal Authentication dashboard in ServiceNow provides a centralized interface for users to manage their personal authentication credentials to third-party integrations. This feature allows multiple users to securely use Integration Hub without sharing superuser credentials, enhancing security by eliminating the need to manage access control lists (ACLs) for external systems. It requires an Integration Hub subscription.

    Show full answer Show less

    Dashboard Structure and Functionality

    The dashboard consists of two main sections:

    • My Integrations: Displays the integrations you have authenticated. Each integration is shown as a card where you can Revoke or Renew authentication. Revoking invalidates existing tokens and moves the integration to the "Integrations I can use" section. Renewing refreshes the token and updates the expiration date, requiring reauthentication via a pop-up window tailored to the integration type.
    • Integrations I can use: Shows available integrations that are not yet authenticated. You can authenticate these by selecting the Authenticate button, which opens the same reauthentication pop-up used for renewing tokens.

    Authentication Process

    For ServiceNow integrations, authentication involves entering a username and password to obtain an OAuth token. For other integrations, the OAuth credential page of the respective application is displayed. After successful authentication, the integration card moves to the "My Integrations" section.

    Setup Requirements

    • If already using personal authentication credentials, enable the dashboard by installing the Personal Authentication [com.snc.snihubpersonalauth] plugin. Access it via All > IntegrationHub > Personal Authentication > Personal Integrations.
    • The dashboard lists integrations from the Connection & Credential Aliases [sysalias] table, showing those with valid tokens in "My Integrations" and others in "Integrations I can use."
    • If not using personal authentication yet, configure a Connection & Credential Alias with an OAuth 2.0 credential and Integration Type set to Personal.

    Token Revocation

    Revoking an authentication also revokes all related active tokens for that user in the instance. You can further enable token revocation at the OAuth Server by specifying the OAuth Server’s token revocation endpoint URL in the Token Revocation URL field on the Application Registries form (found under All > System OAuth > Application Registry).

    Access Control

    Users require the snpersonalauth.personalauthuser role to access and manage the Personal Authentication dashboard.

    Use your personal credentials to connect to third-party integrations. View, authenticate, revoke, and renew your personal authentications through a simplified, consolidated interface.

    The Personal Authentication dashboard provides a streamlined way to manage your personal authentication integrations. With personal authentication, multiple users can use Integration Hub without needing to share superuser credentials. It also enhances security by removing the need to manage ACLs for third-party systems.

    This feature requires an Integration Hub subscription. For more information, see Legal schedules - IntegrationHub overview.

    Dashboard overview

    The Personal Authentication dashboard has two main sections.
    • The My Integrations section at the top of the page, which shows your authenticated integrations.
    • The Integrations I can use section at the bottom of the page, which shows the integrations available to you.
    Figure 1. Personal Authentication dashboard
    The Personal Authentication dashboard with two sections: The My Integrations section, and the Integrations I can use section.
    My Integrations section

    Displays authenticated integrations. Each integration has its own card. From the card, you can Revoke or Renew the authentication.

    When you revoke an authentication, you revoke any relevant access or refresh tokens for the personal authentication credential associated with the integration. Revoking invalidates the existing authentication. You can reauthenticate later to reestablish the connection. Once the authentication is revoked, the integration card moves to the Integrations I can use section of the dashboard.

    Renewing an authentication renews the associated token and updates the expiration date. To renew, select the Renew button on the integrations card. This button opens a pop-up window where you can reauthenticate the credential. The contents of the pop-up window depend on the integration.
    • For ServiceNow integrations, the pop-up window has fields where you can enter the Username and Password for the credential, then select Get OAuth Token.
    • For all other integrations, the pop-up window displays your OAuth credential page for that application.
    Integrations I can use section

    Displays the integrations that are available but not authenticated. To authenticate, select the Authenticate button on the integration card. Authenticating opens the same pop-up window that opens when you Renew an integration: For ServiceNow integrations, the pop-up window has the Username, Password, and Get OAuth Token buttons. For all other integrations, the pop-up window displays your OAuth credential page for that application.

    Once the credential is authenticated, the integration card moves to the My Integrations section at the top of the dashboard.

    Required dashboard setup

    If you're already using the personal authentication credential type, you can upgrade to the dashboard by installing the Personal Authentication [com.snc.sn_ihub_personal_auth] plugin. After installing the plugin, navigate to All > IntegrationHub > Personal Authentication > Personal Integrations to see the dashboard.

    The integrations on the dashboard all come from the Connection & Credential Aliases [sys_alias] table. Any alias where the credential has a personal integration type is displayed on the dashboard, according to the following guidelines.
    • If the credential currently has a valid token, it's listed in the My Integrations section of the dashboard.
    • If the credential doesn't currently have a valid token, it's listed in the Integrations I can use section of the dashboard.

    If you're not already using the personal authentication credential type, you can configure one by creating a Connection & Credential Alias that uses an OAuth 2.0 credential with the Integration Type of Personal. For more details and instructions, see .

    Token revocation URL

    Revoking an authentication revokes all the related active tokens stored in the instance for the user that initiated the session. You can also enable token revocation on the OAuth Server by providing the server's token revocation endpoint in the Token Revocation URL field.

    To enable authentication revocation at the OAuth Server, fill in the Token Revocation URL field in the Application Registries form for the integration's OAuth Provider. To fill in this field, follow these steps.
    1. Navigate to All > System OAuth > Application Registry.
    2. Select the form for the appropriate OAuth Provider from the Application Registries [oauth_entity] table.
    3. In the Token Revocation URL field, enter the OAuth Server's token revocation endpoint.

    Roles

    The Personal Authentication dashboard requires the sn_personal_auth.personal_auth_user role.