---
sourceDocument: Xanadu Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/governance-risk-compliance

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Configure the UCF integration using the UCF Common Controls Hub

# Configure the UCF integration using the UCF Common Controls Hub {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read

Compliance administrators can download content from Network Frontiers Unified
Compliance Framework (UCF) to use as GRC authority documents,
citations, controls, and control objectives.

## Before you begin

Role required: sn_comp_ucf.admin and oauth_admin

The
documents can be updated on pre-defined intervals. You must have a UCF Common
Controls Hub account to create shared lists and import them into the ServiceNow® instance. API access is required to download UCF
content from the UCF-CCH.  
Note:  
Please take note of the following guidelines before configuring the UCF integration using the UCF Common Controls Hub

* Only the UCF Oauth administrator has access to the system Oauth tables. You must grant the UCF Oauth administrator role to the GRC UCF administrator, so the UCF administrator can set up UCF configuration page.
* UCF integration requires that GRC is configured and users must be a Common Controls Hub administrator.
* The configuration page for the global domain is loaded by default. If you are using Domain Separation, delete the default configuration page, and create one specific to your domain.
{#configure-UCF-integration__ul_cyf_kqq_sjb}

## About this task

## Procedure

1. Navigate to AllPolicy and ComplianceAdministrationUnified Compliance Integration.
2. Click the UCF configuration.  
3. On the form, fill in the fields.  
   {#configure-UCF-integration__table_epy_qrq_f5__entry__2}

   | Field | Description |
   |-|-|
   | Shared List | The shared list to be imported. Note: Shared lists appear for subscription authentication. |
   | Authentication type | Select Oauth. |
   | OAuth details ||
   | Client ID | Enter the Client ID or UCF OAuth Client ID provided by Customer Service and Support. See [Create a Now Support Case for UCF-CCH account integration information](https://www.servicenow.com/docs/zvpIz5xhuJha2Knw1_I2Lw "After establishing your UCF CCH account, use the Now Support Service Portal to initiate the account integration process.") for information. Note: Configuration information is specific to the ServiceNow® instance. Be sure to enter accurate information for any test, development, or production instances you are using. Do not include spaces in the entry. |
   | Client Secret | Enter a Client Secret to be used by the OAuth Client to authenticate to the Authorization Server. The Client Secret must be sufficiently random to not be guessable. |
   | Oauth2 profile | Enter the OAuth2 profile to use for downloading. The default is the United Compliance Framework Default Profile that is installed with the UCF plugin. This field doesn't typically need to be changed. |
   | Redirect URL | Enter the Redirect URL, provided by Customer Service and Support. For example, `https://mycompany.service-now.com/oauth_redirect.do` |
   [Table 1. UCF Configuration]

   {#configure-UCF-integration__table_epy_qrq_f5}
4. Right-click the form header and click Save.
5. In the UCF Integration dialog that appears, click Request New Token.  
   Note:  
   For initial configuration, a user with an UCF administrator account performs this setp and the next step.
6. Enter your Common Controls Hub credentials to log in.
7. In the application authorization message that displays, click Authorize.
8. Select a shared list and click Save Configuration.
{#configure-UCF-integration__steps_owp_sfl_t2b}

## What to do next

If UCF introduces new fields and content, administrators can use staging tables and
transform maps to accommodate those changes to UCF data formats. This is an advanced
configuration and not required. The following import sets and tables can be
configured to customize the UCF download logic.  
{#configure-UCF-integration__table_qnw_htb_mw__entry__2}

| Staging table | Description |
|-|-|
| UCF Authority Document \[sn_comp_ucf_authority_document\] | The UCF Authority Document staging table is used to store authority documents that are downloaded from the UCF Common Controls Hub |
| UCF Citation \[sn_comp_ucf_citation\] | The UCF Citation staging table is used to store citations that are downloaded from the UCF Common Controls Hub |
| UCF Control \[sn_comp_ucf_control\] | The UCF Control staging table is used to store controls that are downloaded from the UCF Common Controls Hub |
| UCF Citation to Control \[sn_comp_ucf_m2m_control_citation\] | The UCF Citation to Control staging table is used to store citation to controls that are downloaded from the UCF Common Controls Hub |
[Table 2. Staging table \[extends from import set row table: import_set_row\] used for UCF integration]

{#configure-UCF-integration__table_qnw_htb_mw}  
{#configure-UCF-integration__table_dq2_3tb_mw__entry__2}

| Transform maps | Description |
|-|-|
| Default Authority document transform | Transforms data from the UCF Authority document staging table into the Authority Document table |
| Default Citation Transform | Transforms data from the UCF Citation staging table into the Citation table |
| Default Control transform | Transforms data from the UCF Control staging table into the Control Objective table |
| Control to Citation transform map | Transforms data from the UCF Citation to Control table into the Control Objective to Citation table |
[Table 3. Transform maps used for UCF integration]

{#configure-UCF-integration__table_dq2_3tb_mw}
* **[Integrate with UCF Common Controls Hub to manage compliance frameworks](https://www.servicenow.com/docs/2I8FBRznJaoKthBFHyeZ6Q)**   
  Compliance administrators can download content from Network Frontiers Unified Compliance Framework (UCF) to use as GRC authority documents, citations, controls, and control objectives. The documents can be updated on pre-defined intervals. You must have a UCF Common Controls Hub account to create shared lists and import them into the ServiceNow® instance.

*[\>]: and then