---
sourceDocument: Australia Financial Services Operations
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/financial-services-operations

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Financial Services Operations

ft:clusterId :

    - finso

bundleId :

    - finso

workflow :

    - Customer and Industry


---

# Set up OAuth for Card Data Security

# Set up OAuth for Card Data Security {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

After you configure your tokenizer service, follow these steps to set up OAuth connectivity with your ServiceNow instance. This connection is required to get file metadata and download URLs from files hosted in the tokenizer
service vault.

## Token Authentication in Card Data Security {#set-up-oauth-for-card-data-security__section_ejd_czy_23c}

Card Data Security uses JSON Web Tokens (JWT) for authentication. It uses the following token types for authentication:

* Regular tokens---used for authentication in backend connections.{#set-up-oauth-for-card-data-security__section_ejd_czy_23c-li1}
{#set-up-oauth-for-card-data-security__section_ejd_czy_23c-li1}
* Context-aware tokens---required for user interactions in the UI, such as viewing documents in the data vault.{#set-up-oauth-for-card-data-security__section_ejd_czy_23c-li2}
{#set-up-oauth-for-card-data-security__section_ejd_czy_23c-li2} {#set-up-oauth-for-card-data-security__ul_lky_p1z_23c}

## Overview of tasks to set up OAuth for Card Data Security {#set-up-oauth-for-card-data-security__section_hcw_wzx_23c}

When you set up OAuth for Card Data Security, repeat these steps for each connection type in the table below.{#set-up-oauth-for-card-data-security__table_a3r_h1y_g3c__entry__3}

| Name | Connection Alias | Description |
|-|-|-|
| Service Token | CardDataSecurity.ServiceToken | For Vault API interactions and backend requests, such as retrieving file download URLs or external document metadata. |
| Client Token | CardDataSecurity.ClientToken | For obtaining context-aware bearer tokens that are used in detokenization requests. Used for viewing files and revealing PAN values. |
| Data Token Signer | CardDataSecurity.DataTokenSigner | Required for context-aware authorization. Signs data tokens that are used to make detokenization requests to the data vault. Used for revealing PAN values. Hinweis: The steps below differ when setting up a data token signer. See [Set up a Token Signer](https://servicenow-prod.fluidtopics.net/wfDph5d5tTjivNE~g4~aqw "Configure a token signer to enable secure JWT-based authentication for tokenizer service integration. This task involves creating an OAuth entity profile with JWT Bearer grant type, setting up OAuth credentials, and establishing a connection alias that links to your tokenizer service endpoint.") for specific steps on configuration. |
[Tabelle : 1. Connection types]

{#set-up-oauth-for-card-data-security__table_a3r_h1y_g3c}  
1. [Create a JKS file](https://servicenow-prod.fluidtopics.net/jW6Gj~DpO4UVrL0sxwTfeQ "Generate a Java KeyStore (JKS) file for OAuth authentication setup. This process involves extracting the private key from a credentials JSON file and converting it through PEM format to create the required JKS file.")

   Generate a Java KeyStore (JKS) file for OAuth authentication setup.
2. [Create an X.509 Certificate](https://servicenow-prod.fluidtopics.net/qfJWVOsJG_z9cH6Ejz3Vdw "Create an X.509 certificate record in ServiceNow by uploading a Java Key Store (JKS) file and configuring the certificate settings. This enables secure authentication and encryption for Card Data Security applications.")

   Create an X.509 certificate record by uploading a JKS file and configuring the certificate settings.
3. [Set up a JWT key](https://servicenow-prod.fluidtopics.net/Dvmrs4moVChLaUgqsmFrTg "Configure a JWT key to enable secure authentication for Card Data Security by linking X.509 certificates with tokenizer service credentials. This setup is required before creating a JWT provider for OAuth authentication workflows.")

   Configure a JSON Web Token (JWT) key by linking X.509 certificates with tokenizer service credentials.
4. [Set up a JWT Provider](https://servicenow-prod.fluidtopics.net/QND~eI7QRhvo3nodzD5vnA "Configure a JWT Provider to enable secure token-based authentication for Card Data Security by setting up signing configurations and claim values. This provider generates JSON Web Tokens that authenticate requests to the tokenizer service using credentials from your tokenizer service JSON file.")

   Configure a JWT Provider by setting up signing configurations and claim values.
5. [Set up an OAuth Provider](https://servicenow-prod.fluidtopics.net/YIcb36hIfl0Rb7T3YPNNbQ "Configure an OAuth provider to enable secure authentication between ServiceNow and a third-party tokenizer service for Card Data Security. This setup establishes the necessary connection credentials and JWT configuration required for secure data tokenization operations.")

   Configure an OAuth provider to establish the necessary connection credentials and JWT configuration.
6. [Set up the Connection \& Credential records](https://servicenow-prod.fluidtopics.net/YAI_prmRGF0MvSZas~4Jzw "Configure the Connection & Credential records to enable secure communication between ServiceNow and the tokenizer service for Card Data Security. This connection establishes the endpoint URL and vault ID required for data tokenization operations.")

   Configure the Vault API connection to establish the endpoint URL and vault ID required for data tokenization operations.
7. [Set up an OAuth Credential](https://servicenow-prod.fluidtopics.net/X40Bly_Vercc1Echn4Bm4g "Create an OAuth 2.0 credential to enable secure authentication for Card Data Security integrations. This credential uses an existing OAuth Provider to establish authenticated connections with external systems.")

   Create an OAuth 2.0 credential to enable secure authentication for Card Data Security integrations.
8. [Set up the OAuth Vault API REST message](https://servicenow-prod.fluidtopics.net/32dUh71i5mEK2Cdch3lS9w "Configure the Data Security Vault API REST message with the correct endpoint URL and OAuth authentication profile. This setup enables secure communication between ServiceNow and the tokenizer service for Card Data Security.")

   Configure the Data Security Vault API REST message with the correct endpoint URL and OAuth authentication profile.
{#set-up-oauth-for-card-data-security__ol_gsp_yzx_23c}