---
sourceDocument: Xanadu ServiceNow AI Platform Administration
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/xanadu/platform-administration

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu ServiceNow AI Platform Administration

ft:clusterId :

    - platadm

bundleId :

    - platadm

workflow :

    - Platform


---

# Configure a JWT provider

# Configure a JWT provider {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Configure a JWT provider on the ServiceNow AI Platform to configure an OAuth
application profile to authenticate using certificates.

## Before you begin

Upload a Java Key Store certificate. Attach a JKS certificate containing the
certificate uploaded on Microsoft Azure to your instance to use when
enabling the JWT client authentication. For more information, see [Upload Java Key Store certificate](https://www.servicenow.com/docs/access?context=JWT-Bearer-token-support&version=xanadu&pubname=xanadu-platform-security&section=upload-jks-certificate&ft:locale=en-US).

Create a JWT signing key to assign to your Java KeyStore (JKS) certificate. For more
information, see [Configure a JWT signing key](https://www.servicenow.com/docs/access?context=JWT-Bearer-token-support&version=xanadu&pubname=xanadu-platform-security&section=configure-JWT-signing-key&ft:locale=en-US).

Role required: admin

## Procedure

1. Add a JWT provider to your ServiceNow instance and fill in the claim values.  
   {#configure-jwt-provider__table_swt_kjj_wtb__entry__2}

   | Claim Name | Claim Value |
   |-|-|
   | aud | https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token Note: Tenant ID is the directory ID copied from Microsoft Azure. |
   | iss | Client ID copied from Microsoft Azure |
   | sub | Client ID copied from Microsoft Azure |
   [ ]

   {#configure-jwt-provider__table_swt_kjj_wtb}For more information, see [Create a JWT provider with a JWT signing key](https://www.servicenow.com/docs/access?context=JWT-Bearer-token-support&version=xanadu&pubname=xanadu-platform-security&section=associate-jwt-provider-key&ft:locale=en-US).
2. From the JWT Provider record menu, select Copy sys_id and copy the JWT provider sys_id.

## What to do next

[Generate a SHA-1 thumbprint](https://servicenow-prod.fluidtopics.net/Ie0HIoKHOfg1RsVp91l7rQ "Generate a SHA-1 thumbprint using the JWT provider's sys_id and JKS certificate's sys_id and certificate's alias to be added to the GraphCertificateOAuthTemplate script.")