---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Workflow

# JSON Web token grant workflow {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 30. Juni 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Configuring an OAuth JSON Web Token (JWT) bearer grant secures token-based authentication without user interaction.

## Vorbereitungen

Role required: <kbd class="ph userinput">oauth_admin, mi_admin, admin</kbd>

## Warum und wann dieser Vorgang ausgeführt wird

The client application generates a signed JWT with identity-related claims such as the user or system it represents. The client application sends the JWT to the ServiceNow instance to request an access token.

*

  When acting on behalf of a user:
  :   The token represents a previously authenticated user. It enables secure, seamless access without prompting the user for credentials or consent. ServiceNow trusts the request by validating the user's identity from the signed token, eliminating the need for real-time user interaction.
*

  When acting as itself:
  :   The token identifies and authenticates the client application. Instead of using a shared secret, the application signs the token with a private key. This offers a more secure alternative to the client
      credentials grant.
{#using-json-web-token-grant__ul_ayd_42w_vfc}
Abbildung : 1. JWT Grant workflow

## Prozedur

1. The client application sends a token request to ServiceNow, with a JWT signed with its private key.
2. ServiceNow validates the JWT using the corresponding public key.  
   It maps the `sub` (subject) claim in the token to a `sys_user ` record.
3. ServiceNow validates the JWT, and issues the access token.
4. The client includes the access token in the API requests to ServiceNow.
5. ServiceNow validates the access token, and returns the appropriate API response.