---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Configure Private Key JWT for OIDC based SSO

# Configure Private Key JWT for OIDC based SSO {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Configure Private Key JWT for OIDC based SSO integrations.

## Vorbereitungen

Role required: oauth_admin

You must perform the following tasks before choosing Private Key JWT for OIDC based SSO.

* [Upload Java Key Store certificate](https://servicenow-prod.fluidtopics.net/XcSlmIyJ6eEDmjYvdTUbXQ#upload-jks-certificate "You can attach a Java KeyStore (JKS) certificate to your instance to use to enable the JWT client authentication."): Attach a JKS certificate to your instance to use to enable the JWT client authentication.
* [Configure a JWT signing key](https://servicenow-prod.fluidtopics.net/XcSlmIyJ6eEDmjYvdTUbXQ#configure-JWT-signing-key "Create a JSON Web Token (JWT) signing key to assign to your Java KeyStore (JKS) certificate,"): Create a JWT signing key to assign to your Java KeyStore (JKS) certificate.  
  Hinweis:  
  If you want to add X.509 Certificate SHA-1 Thumbprint int (x5t) to the header as part of the JWT Key, you must configure the form and add the X.509 Certificate SHA-1 Thumbprint int (x5t) field.
* [Create a JWT provider with a JWT signing key](https://servicenow-prod.fluidtopics.net/XcSlmIyJ6eEDmjYvdTUbXQ#associate-jwt-provider-key "Add a JSON Web Token (JWT) provider to your ServiceNow instance."): Add a JWT provider to your ServiceNow instance.

{#config-private-key-jwt-oidc-sso__ul_xsw_4qn_lzb}

To include a JWT Key for OIDC based Identity Provider, you must:

* Install the Integration - Multiple Provider Single Sign-On Installer (<kbd class="ph userinput">com.snc.integration.sso.multi.installer</kbd>) plugin.
* Enable the properties for Multiple Provider SSO Properties. For more information, see [Multi-Provider SSO properties, tables, and scripts](https://servicenow-prod.fluidtopics.net/MI2cksGcfac6ZqR5Qk9B_A "The Integration - Multiple Provider Single Sign-On Installer plugin includes the following system properties, tables, and scripts.").
* Create an OIDC Identity Provider. For more information, see [Create an OpenID Connect (OIDC) configuration for Single Sign-On (SSO)](https://servicenow-prod.fluidtopics.net/9_75b306SdVFue_uCTQrjg "Create or update an OpenID Connect (OIDC) configuration by using the Multi-Provider SSO plugin.").
{#config-private-key-jwt-oidc-sso__ul_dfk_yhw_mzb}

## Prozedur

1. Navigate to AllSystem OAuthApplication Registry.
2. Select the OIDC Identity Provider that you had created.
3. On top of the form, select ConfigureForm Design.  
   Hinweis:  
   You must add Send Credentials and JWT Provider fields to the form to use the Private Key JWT for OIDC based Identity Provider authentication requests.
4. Choose the As Private Key JWT for Send Credentials.
5. Select the JWT Provider.  

   When the user authenticates, the authentication page has options to login through Okta.