---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# OAuth authentication

# OAuth Inbound and Outbound authentication {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

OAuth based authentication validates the identity of the client that attempts to establish a trust on the system by using an authentication protocol.

OAuth 2.0 - Open Authorization is the industry-standard protocol for authorization, that ocuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, and mobile
devices.

It is a standard that is designed to allow a website or application to access resources hosted by other web apps on behalf of a user.

Instead of using the resource user's credentials to access protected resources, the client obtains an access token. Access tokens are issued to third-party clients with the user's approval, the client then uses the access token to
access the protected resources.

From Zurich, you can configure OAuth integration with the following enhancements:

* Increase client secret length to 2048 characters to meet security requirements of third-party systems like Azure DevOps (ADO).
* Provide a JSON Web Key Set (JWKS) URL to automatically manage and update the public key for JSON Web Tokens (JWT) signature validation.
* Request OAuth tokens using the JWT grant type signed with Enhanced Security (ES) algorithms.
* Configure a unique identifier for JWT tokens.

{#api-inbound-and-outbound__ul_h3n_xz4_cfc}

## Inbound {#api-inbound-and-outbound__section_rjz_bgl_nwb}

Create an endpoint for external clients that want to access your instance. This creates an OAuth client application record and generates a client ID and client secret that the client needs to access the restricted resources on
the instance. For more information see, [OAuth Inbound](https://servicenow-prod.fluidtopics.net/1E8_x~A4Gcv7fjPNqX8lKg "OAuth Inbound authentication allows trusted external applications to securely access ServiceNow APIs, ensuring controlled and authorized connections.").

## Outbound {#api-inbound-and-outbound__section_xtz_cgl_nwb}

Use a third-party OAuth provider that provides the authorization for access to your instance. Specify an OAuth profile and OAuth scope when you are connecting to another OAuth provider. For more information see, [OAuth Outbound](https://servicenow-prod.fluidtopics.net/Xi22CuHUs7yn_rWiRhGPHw "OAuth outbound enables you to pull data from a third-party provider to your instance.").