--- sourceDocument: Australia Customer Service Management sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/customer-service-management Release : - australia ft:locale : - pt-BR ft:publication_title : - Australia Customer Service Management ft:clusterId : - csm bundleId : - csm workflow : - Customer and Industry --- # Configuring authentication settings # Configuring authentication settings for ServiceNow services and components in AEM {#ariaid-title1} * Versão de lançamento: Australia * * Atualizado 12 de mar. de 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 min. de leitura Enable logging in to both the Adobe Experience Manager (AEM) instance of your website and the ServiceNow instance using a third-party OpenID Connect (OIDC) provider that supports both OIDC and single sign-on (SSO) protocols. You can select Okta or Microsoft Azure as the third-party OIDC provider that supports both OIDC and single sign-on (SSO) protocols. Nota: Your AEM instance must use the selected third-party OIDC provider as the SSO provider. ## Register ServiceNow with a third-party OIDC provider {#ariaid-title2} Register ServiceNow as a web application with a third-party OIDC provider to validate the identity of a user using a JSON Web Token (JWT). ### Antes de Iniciar ServiceNow identifies an end user by sending the JWT token containing the end user information to the OIDC provider. The process to register ServiceNow with the OIDC provider varies depending on the provider. Nota: This topic uses Okta as an example, but you can substitute the details of your own OIDC provider. Role required: Okta account (Third-party OIDC provider account) ### Procedimento 1. Log in to your Okta account. 2. Select the Applications menu. 3. On the Applications page, click Add Application. 4. On the Create New Application page, select Web. 5. Fill in the fields. {#aem-register-sn-oidcprovider__table_y5k_pxj_vkb__entry__2} | Field | Value | |-|-| | Application label | Unique application name for your ServiceNow instance. | | Authorization Code | Selected | | Refresh Token | Selected | | Login redirect URIs | Callback URL of your AEM instance. The URL structure is: https://\:\/bin/now/auth/callback | | Login initiated | App Only | [Tabela 1. OIDC settings] {#aem-register-sn-oidcprovider__table_y5k_pxj_vkb} 6. Click Done. ### O que Fazer Depois In the Client Credentials section, record the Client ID and Client secret values for when you set up Okta as an OAuth provider in your ServiceNow and AEM instances. ## Add an OIDC provider to the ServiceNow instance {#ariaid-title3} Add a third-party OIDC provider service to your ServiceNow instance to verify the identity of end users. ### Antes de Iniciar You must have configured the third-party OIDC provider service as an OAuth provider and recorded your Client ID and Client secret values. For more information, see [Register ServiceNow with a third-party OIDC provider](https://servicenow-prod.fluidtopics.net/rjWifyyvBRuyKsaJL1Lrkw#aem-register-sn-oidcprovider "Register ServiceNow as a web application with a third-party OIDC provider to validate the identity of a user using a JSON Web Token (JWT)."). Role required: oauth_admin ### Procedimento 1. Navigate to AllSystem OAuthApplication Registry. 2. Set up OAuth for your ServiceNow instance. * Click New, select Configure an OIDC provider to verify ID tokens, and then fill in the Application Registries form. * Select an existing template for your OIDC provider (Okta or Microsoft Azure), and then either accept the default values in the Application Registries form or modify them. Nota: OIDC provider templates are available after loading demo data with the OAuth 2.0 plugin. For more information, see [Configure an OAuth OIDC provider](https://www.servicenow.com/docs/access?context=add-OIDC-entity&version=australia&pubname=australia-platform-security&ft:locale=en-US). {#aem-add-provider-sn__choices_ndn_jvl_tkb} {#aem-add-provider-sn__table_zfw_cyj_vkb__entry__2} | Field | Description | |-|-| | Name | Unique name for the OAuth provider. | | Client ID | Client ID you recorded earlier for your ServiceNow instance registered in the third-party OIDC server. The ServiceNow instance uses the client ID when requesting an access token. | | Client Secret | Client secret you recorded earlier for your ServiceNow instance registered in the third-party OIDC server. | | OAuth OIDC Provider Configuration | OIDC provider with which you registered your ServiceNow instance. Nota: Select the record of your OIDC provider configuration or create another configuration, if not available, to ensure that the OIDC Metadata URL field value is correct and the User Claim and User Field fields are mapped correctly. | [Tabela 2. Application Registries form] {#aem-add-provider-sn__table_zfw_cyj_vkb} 3. Save your changes. * For an existing template, click Update. * For a new template, click Submit. ## Configure OIDC provider details in Adobe Experience Manager {#ariaid-title4} Configure the third-party OIDC provider details in your Adobe Experience Manager (AEM) instance to access the ServiceNow components as an authenticated user. ### Antes de Iniciar You must have configured the third-party OIDC provider service as an OAuth provider and recorded your Client ID and Client secret values (see [Register ServiceNow with a third-party OIDC provider](https://servicenow-prod.fluidtopics.net/rjWifyyvBRuyKsaJL1Lrkw#aem-register-sn-oidcprovider "Register ServiceNow as a web application with a third-party OIDC provider to validate the identity of a user using a JSON Web Token (JWT).")). Role required: AEM administrator ### Por Que e Quando Desempenhar Esta Tarefa Configure the OIDC provider details in AEM to enable the AEM users to access the ServiceNow instance as authenticated users. If you don't configure the OIDC provider details in AEM, an AEM user is considered as a public user when accessing the ServiceNow instance. ### Procedimento 1. Access the web console in AEM with a URL in the following format: https://\:\/system/console/configMgr. 2. Search for ServiceNow OAuth Configuration. 3. In the Name column, click the ServiceNow OAuth Configuration link. 4. Provide values for the configuration settings. {#aem-configure-oidc__table_z3l_4zj_vkb__entry__2} | Field | Description | |-|-| | ServiceNow Client ID | Client ID you recorded when setting up the OAuth for your ServiceNow instance. | | ServiceNow Client Secret | Client secret you recorded when setting up the OAuth for your ServiceNow portal. | | OAuth Provider Auth URL | Authorization server end point used for obtaining the authorization code. In the following URL structure, substitute the domain name of the authorization server of your third-party OIDC provider. Example: https://\/oauth2/authorize | | OAuth Provider Access Token URL | Authentication server endpoint used for exchanging the authorization code for an access token. In the following URL structure, substitute the domain name of the authorization server of your third-party OIDC provider. Example: https://\/oauth2/token | | Authorization request scope | List of scopes for limiting the authorization access. Nota: The default value openid email profile offline_access works for most OIDC providers (for example, Okta). | | User property to store refresh token | Name of the user property to store the authentication refresh token. Nota: Once filled, this token is used to obtain access tokens for that user in all future requests. | [Tabela 3. ServiceNow OAuth Configuration settings] {#aem-configure-oidc__table_z3l_4zj_vkb} 5. Click Save. {#aem-configure-oidc__steps_pp1_ttl_tkb}