---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Set up OAuth provider with JWT Bearer grant type

# Set up OAuth provider with JWT Bearer grant type {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 Minuten Lesedauer

JSON Web Tokens (JWTs) enable the capability to configure server-to-server API
interactions between ServiceNow and
external API providers without requiring any user intervention. This support enables Integration Hub or other automated
tasks using JWTs to configure API and Service integrations with different
providers.

## Vorbereitungen

Role required: oauth_admin

## Warum und wann dieser Vorgang ausgeführt wird

The following tasks show how ServiceNow can be set up to use JWTs for OAuth 2.0 client authentication and authorization grants. ServiceNow is the OAuth client, and you can configure an OAuth provider, such as Box or Docusign.

## Prozedur

1. [Upload Java Key Store certificate](https://servicenow-prod.fluidtopics.net/XcSlmIyJ6eEDmjYvdTUbXQ#upload-jks-certificate "You can attach a Java KeyStore (JKS) certificate to your instance to use to enable the JWT client authentication.")  
   Attach a JKS certificate to your instance to use to enable the JWT client authentication.
2. [Configure a JWT signing key](https://servicenow-prod.fluidtopics.net/XcSlmIyJ6eEDmjYvdTUbXQ#configure-JWT-signing-key "Create a JSON Web Token (JWT) signing key to assign to your Java KeyStore (JKS) certificate,")  
   Create a JWT signing key to assign to your Java KeyStore (JKS) certificate.
3. [Create a JWT provider with a JWT signing key](https://servicenow-prod.fluidtopics.net/XcSlmIyJ6eEDmjYvdTUbXQ#associate-jwt-provider-key "Add a JSON Web Token (JWT) provider to your ServiceNow instance.")  
   Add a JWT provider to your ServiceNow instance.
4. [Connect to a third-party OAuth provider](https://servicenow-prod.fluidtopics.net/~CI~S03mc2pqaDw4Bk3xxg "Configure how the client ID and secret are sent to your OAuth provider.")  
   Create a third-party OAuth provider with a JWT Bearer as the default grant type in the ServiceNow Application Registry.
5. [Specify an OAuth profile](https://www.servicenow.com/docs/access?context=t_SpecifyAnOAuthProfile&version=australia&pubname=australia-api-reference&ft:locale=en-US)  
   Open the OAuth entity profile of the OAuth provider and assign a JWT provider.

## Upload Java Key Store certificate {#ariaid-title2}

You can attach a Java KeyStore (JKS) certificate to your instance to use to enable
the JWT client authentication.

### Vorbereitungen

Role required: oauth_admin

### Prozedur

1. Navigate to AllMulti-Provider SSOx509 Certificate.
2. Fill in the form as needed.

   | Option | Bezeichnung |
   | Name | A unique name for your certificate. |
   | Notify on expiration | Designate whom to notify when the certificate expires. |
   | Warn in days to expire | Send an email notification to your certificate manager before your certificate expires. |
   | Active | Enables the certificate to use for token requests. |
   | Type | The type of certificate you are uploading. |
   | Expires in days | The amount of days until the certificate expires. |
   | Key store password | The password associated with the certificate. |
   | Short description |   |
   |-|-|

   {#upload-jks-certificate__choicetable_yqx_5f2_1gb}
3. Click Submit.

## Configure a JWT signing key {#ariaid-title3}

Create a JSON Web Token (JWT) signing key to assign to your Java KeyStore (JKS)
certificate,

### Vorbereitungen

Role required: oauth_admin  
Hinweis:  
If you want to add X.509 Certificate SHA-1 Thumbprint int (x5t) to the header as part of the JWT Key, you must configure the form and add the X.509 Certificate SHA-1 Thumbprint int (x5t) field.

### Prozedur

1. Navigate to AllSystem OAuthJWT Keys.
2. Fill in the form as needed.

   | Option | Bezeichnung |
   | Name | A unique name for your JWT Key signing configuration. |
   | Signing Keystore | The keystore designated when signing the JWT. |
   | Key ID | The Key ID (kid) helps identify which key is used when multiple keys are used to sign tokens. Hinweis: If you configure this field, the Key ID claim is included in the JWT. If you do not configure this field, your JWT will not have a Key ID claim. |
   | Signing Algorithm | The algorithm to use to sign with the JWT key. RSA 256 is the only algorithm available. |
   | Signing Key Password | The password associated with the signing key. |
   | Active | Designate that the JWT key alias is actively referenced from a JWT provider. |
   |-|-|

   {#configure-JWT-signing-key__choicetable_yqx_5f2_1gb}
3. Click Submit.

## Create a JWT provider with a JWT signing key {#ariaid-title4}

Add a JSON Web Token (JWT) provider to your ServiceNow instance.

### Vorbereitungen

Role required: oauth_admin

### Prozedur

1. Navigate to AllSystem OAuthJWT Provider.
2. Fill in the form and click Submit.

   | Option | Bezeichnung |
   | Name | A unique name for your JWT provider configuration. |
   | Expiry Interval (sec) | The lifespan of the tokens, in seconds, generated by the JWT provider. |
   | Signing Configuration | The ServiceNow JWT signing key configuration to apply. |
   |-|-|

   {#associate-jwt-provider-key__choicetable_yqx_5f2_1gb}