Using the Personal Authentication dashboard
Summarize
Summary of Using the Personal Authentication Dashboard
The Personal Authentication dashboard simplifies the management of personal authentication for third-party integrations. It allows users to view, authenticate, revoke, and renew their personal authentication credentials without needing to share superuser credentials, enhancing security and usability. This feature requires an Integration Hub subscription.
Show less
Key Features
- My Integrations Section: Displays all authenticated integrations with options to revoke or renew authentication. Revoking invalidates the authentication, moving the integration to the "Integrations I can use" section.
- Integrations I Can Use Section: Shows available, unauthenticated integrations. Users can authenticate by selecting the Authenticate button, which opens a pop-up for credential entry.
- Dashboard Setup: To use the dashboard, install the Personal Authentication plugin and navigate to the dashboard. Integrations are displayed based on their token validity.
- Token Revocation: Revoking authentication removes all associated tokens. The Token Revocation URL can be configured in the OAuth Server settings to enable token revocation.
- Required Role: Access to the dashboard requires the snpersonalauth.personalauthuser role.
Key Outcomes
By utilizing the Personal Authentication dashboard, users can efficiently manage their personal authentication credentials, improve security by avoiding superuser credential sharing, and maintain seamless access to necessary integrations. This centralized management system enhances operational efficiency for ServiceNow customers.
Use your personal credentials to connect to third-party integrations. View, authenticate, revoke, and renew your personal authentications through a simplified, consolidated interface.
The Personal Authentication dashboard provides a streamlined way to manage your personal authentication integrations. With personal authentication, multiple users can use Integration Hub without needing to share superuser credentials. It also enhances security by removing the need to manage ACLs for third-party systems.
This feature requires an Integration Hub subscription. For more information, see Legal schedules - IntegrationHub overview.
Dashboard overview
- The My Integrations section at the top of the page, which shows your authenticated integrations.
- The Integrations I can use section at the bottom of the page, which shows the integrations available to you.
- My Integrations section
-
Displays authenticated integrations. Each integration has its own card. From the card, you can Revoke or Renew the authentication.
When you revoke an authentication, you revoke any relevant access or refresh tokens for the personal authentication credential associated with the integration. Revoking invalidates the existing authentication. You can reauthenticate later to reestablish the connection. Once the authentication is revoked, the integration card moves to the Integrations I can use section of the dashboard.
Renewing an authentication renews the associated token and updates the expiration date. To renew, select the Renew button on the integrations card. This button opens a pop-up window where you can reauthenticate the credential. The contents of the pop-up window depend on the integration.- For ServiceNow integrations, the pop-up window has fields where you can enter the Username and Password for the credential, then select Get OAuth Token.
- For all other integrations, the pop-up window displays your OAuth credential page for that application.
- Integrations I can use section
-
Displays the integrations that are available but not authenticated. To authenticate, select the Authenticate button on the integration card. Authenticating opens the same pop-up window that opens when you Renew an integration: For ServiceNow integrations, the pop-up window has the Username, Password, and Get OAuth Token buttons. For all other integrations, the pop-up window displays your OAuth credential page for that application.
Once the credential is authenticated, the integration card moves to the My Integrations section at the top of the dashboard.
Required dashboard setup
If you're already using the personal authentication credential type, you can upgrade to the dashboard by installing the Personal Authentication [com.snc.sn_ihub_personal_auth] plugin. After installing the plugin, navigate to to see the dashboard.
- If the credential currently has a valid token, it's listed in the My Integrations section of the dashboard.
- If the credential doesn't currently have a valid token, it's listed in the Integrations I can use section of the dashboard.
If you're not already using the personal authentication credential type, you can configure one by creating a Connection & Credential Alias that uses an OAuth 2.0 credential with the Integration Type of Personal. For more details and instructions, see Create a Connection & Credential alias.
Token revocation URL
Revoking an authentication revokes all the related active tokens stored in the instance for the user that initiated the session. You can also enable token revocation on the OAuth Server by providing the server's token revocation endpoint in the Token Revocation URL field.
- Navigate to .
- Select the form for the appropriate OAuth Provider from the Application Registries [oauth_entity] table.
- In the Token Revocation URL field, enter the OAuth Server's token revocation endpoint.
Roles
The Personal Authentication dashboard requires the sn_personal_auth.personal_auth_user role.