---
sourceDocument: Xanadu API Reference
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/xanadu/api-reference

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu API Reference

ft:clusterId :

    - crapiref

bundleId :

    - crapiref

workflow :

    - Creator


---

# OAuth 2.0 tutorial - create an OAuth provider and profile

# OAuth 2.0 tutorial - create an OAuth provider and profile {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Set up the Google service as an OAuth provider in ServiceNow by entering your client information, Google API URLs, and configuring the OAuth profile.

## Before you begin

You must have configured the Google service as an OAuth provider and recorded your Client ID and Client Secret values.

Role required: oauth_admin

## Procedure

1. Navigate to AllSystem OAuthApplication Registry.
2. Click New.
3. Select Connect to a third party OAuth Provider.
4. Enter a Name for the OAuth provider.  
   For this example, use <kbd class="ph userinput">Google</kbd>.
5. Enter the Client ID and Client Secret that you obtained from Google.
6. Set the Default Grant type to Authorization Code.
7. In the Authorization URL field, enter <kbd class="ph userinput">https://accounts.google.com/o/oauth2/auth</kbd>.
8. In the Token URL field, enter <kbd class="ph userinput">https://www.googleapis.com/oauth2/v3/token</kbd>.
9. In the Redirect URL field, enter <kbd class="ph userinput">https://&lt;instance&gt;.service-now.com/oauth_redirect.do</kbd>.  
   This URL must match the redirect URL provided to Google.
10. In the Token Revocation URL field, enter <kbd class="ph userinput">https://accounts.google.com/o/oauth2/revoke</kbd>.
11. Right-click the form header and select Save.  
    A new OAuth Entity Profile record is created.
12. In the OAuth Entity Scopes embedded list, add a new row with the Name and OAuth scope values set to <kbd class="ph userinput">https://www.googleapis.com/auth/contacts.readonly</kbd>.
13. Right-click the form header and select Save.
14. In the OAuth Entity Profiles embedded list, select the automatically-created profile.
15. In the OAuth Entity Profile Scopes embedded list, add a new row and select the Google contacts API read-only scope.
16. Click Update.
{#t_OAuthDemoCreateProvider__steps_uxd_nvb_ss}
**Previous topic:** [OAuth 2.0 tutorial - configure the Google service as an OAuth provider](https://servicenow-prod.fluidtopics.net/PtghE3tDbl0YdAscpLWLGg "Use the Google Developer Console to set up an OAuth 2.0 provider.")  
**Next topic:** [OAuth 2.0 tutorial - create a REST message](https://servicenow-prod.fluidtopics.net/0GeFpm8KUq6rnp8wNbddtQ "Create a REST message and associated HTTP method to contact the Google service using the OAuth 2.0 profile.")

*[\>]: and then