Set up Visa Spoke

  • Release version: Australia
  • Updated March 12, 2026
  • 4 minutes to read

    • Integrate the ServiceNow instance and Visa Spoke using basic authentication to authenticate ServiceNow requests.

    Before you begin

    • Request an Integration Hub subscription.
    • Activate the Visa Spoke.
    • Role required: admin.

    Upload client certificate to your instance

    Upload the client certificate to your ServiceNow instance to enable the creation of connections and credentials.

    Before you begin

    Role required: admin.

    Procedure

    1. Navigate to All > System LDAP > Certificates.
    2. Click New.
    3. Complete the form.
      Table 1. X.509 Certificate form fields
      Field Description
      Name Enter a name to uniquely identify the record. For example, Visa Client Certificate.
      Type Select PKCS12 Key Store.
      Notify on expiration Define users to be notified when the certificate expires.
      Warn in days to expire Enter the number of days to send a notification before the certificate expires.
      Active Enable
      Expires in days Enter the number of days until the certificate expires.
      Key store password Enter a password associated with the certificate.
      Short description Enter a summary about the certificate.
    4. Click the attachments icon and attach a client certificate(.p12) file.
    5. Click Validate Stores/Certificates to check if the certificate is correct.
      If the instance encounters any errors with the certificate or keystore, it displays an error message.

    Upload a trusted server certificate

    Generate a certificate for the Visa Resolve Online (VROL) endpoint and upload it to your ServiceNow instance as a TrustCertificate. By uploading the trusted server certificate, you ensure that your instance is connecting to a valid and secure service.

    Before you begin

    Role required: admin

    About this task

    The instance validates outbound Web Service calls by using the certificate provided by the service provider.

    Procedure

    1. Create a new Certificate record with the format PEM and type Trust Store Cert.
    2. Do one of the following actions:
      • Attach the service provider's DER formatted certificate.
      • Copy and paste the service provider's PEM format certificate into the PEM Certificate field.

    Create a protocol profile

    You can create a custom HTTPS protocol profile to specify the credentials and certificates used for outbound web services. For example, you can create a custom HTTPS protocol profile to enable mutual authentication.

    Before you begin

    Procedure

    1. Navigate to All > System Security > Protocol Profiles.
    2. Click New.
    3. Fill in the fields on the form, as appropriate.
      Table 2. Name of form
      Field Description
      Protocol Enter a unique name to identify this HTTPS protocol, such as visahttps. The protocol name allows you to differentiate between normal HTTPS connections and HTTPS connections that use this protocol profile. The name you enter becomes the protocol name in the URL. For example, visahttps://endpoint.service.com
      Note:
      You cannot create a custom protocol whose name matches as an existing protocol name such as HTTPS.
      Keystore Select the Keystore certificate that you had created when uploading a client certificate. For example Visa Client Certificate
      Default port Enter the port number for connections that use this protocol.

    Create basic auth server credentials

    Create credentials to access a ServiceNow instance.

    Before you begin

    Role required: admin

    Procedure

    1. Navigate to All > Connections & Credentials > Credentials.
    2. Select New.
    3. Select Basic Auth Credential.
    4. On the form, fill in the fields.
      Table 3. Basic Auth Credentials form
      Field Description
      Name Enter a unique and descriptive name for this credential.
      User name Name to identify the user.
      Password Password to use this credential.
      Active Option to enable the use of this credential.
      Order The order (sequence) in which the platform tries this credential while it attempts to log in to devices. The smaller the number, the higher in the list this credential appears. Establish credential order when using large numbers of credentials or when security locks out users after three failed login attempts. If all the credentials have the same order number (or none), the instance tries the credentials in a random order. Default value: 100
    5. Select Submit.

    Create a Connection & Credential alias for Visa

    Create a custom credential record for the Visa Spoke account. The Visa Spoke connection and credential alias uses these credentials to authorize actions.

    Before you begin

    Role required: admin.

    Procedure

    1. Navigate to All > Credentials & Connections > Connections, click New, and select HTTP(s) Connection.
    2. Add the following connection information and click Submit:
      Field Description
      Name Unique name of this HTTP(s) connection.
      Credential Select the credential record used to authorize the connection.
      Connection Alias Select the alias record to associate with this connection. Using an alias enables you to update the connection record without having to reconfigure any actions or activities that use the alias.
      URL builder Either manually enter the connection URL or use system to build the URL based on the inputs. Default is unchecked. If checked, the connection URL is calculated from the following fields:
      • Mutual authentication — Check box if mutual authentication is used.
      • Protocol profile — Select the protocol created. For example, visahttps.
      • Host - Enter the Visa Endpoint. For example, xxx.visa.com
      • Base path — Path of the connection string.
      Note:
      If mutual authentication is checked, connection URL is built: Protocol + :// + host:port +URL. If mutual authentication is unchecked, connection URL is built: Protocol profile + :// + host:port +URL
      Connection URL If URL builder is unchecked, enter the connection URL into this field.
      Note:
      If mutual authentication is checked, connection URL is built: Protocol + :// + host:port +URL. If mutual authentication is unchecked, connection URL is built: Protocol profile + :// + host:port +URL
      Active Check the box to make this connection active.
      Domain Determine the domain the action or activity runs in.
    3. Click Submit.
      You are ready to create a custom HTTP(s) action or activity.