---
sourceDocument: Xanadu API Reference
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/xanadu/api-reference

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu API Reference

ft:clusterId :

    - crapiref

bundleId :

    - crapiref

workflow :

    - Creator


---

# Specify an OAuth profile

# Specify an OAuth profile {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

An OAuth profile includes the grant type that the third-party OAuth provider needs to obtain access to the restricted resource.{#t_SpecifyAnOAuthProfile__ph_short-desc-oauth-profile}

## Before you begin

Role required: admin

## About this task

## Procedure

1. Open a third-party OAuth provider record.
2. In the OAuth Entity Profiles embedded list, click Insert a new row and then enter a name for the profile.
3. Right-click the Application Registry form header and select Save.  
   The system creates the profile record.
4. Click the name of the profile you created and then fill in the form fields.  
   {#t_SpecifyAnOAuthProfile__table_khq_dxq_rs__entry__2}

   | Field | Description |
   |-|-|
   | Name | Enter a descriptive name. |
   | OAuth provider | Verify the provider that is associated with the profile. |
   | Grant type | Select the grant type: * Authorization code: The code that is granted to the client to obtain an access token, which is then used to obtain access to the resource. If you select this option, then you need an authorization URL (the URL of the authorization server). * Resource owner password credentials: The user name and password of the user that is trying to obtain access to the resource. * Client Credentials: The client ID and client secret, which are both used to get the access token. This method does not provide refresh tokens. * JWT Bearer: An authorization server validates a JWT token which enables identity and security information to be shared across security domains. * SAML2 Bearer: Generates the SAML2 assertion and then exchanges the assertion for the access tokens wit the provider. Note: For outbound request to SuccessFactors use the SAML2 Bearer as the Default Grant Type. {#t_SpecifyAnOAuthProfile__ul_ln4_4pg_nwb} |
   | Is default | Select this option to make the profile the default option for the associated provider. |
   | Embedded list ||
   | OAuth Entity Profile Scopes | [Specify the OAuth entity scope](https://servicenow-prod.fluidtopics.net/ggEH07~Y7s0iQMmdevIzLA "Specify the OAuth scopes that you get from the provider. Scopes can be any level of access specified by the provider, such as read, write, or any string, including a URL."). |
   [ ]

   {#t_SpecifyAnOAuthProfile__table_khq_dxq_rs}
5. Click Update.