---
sourceDocument: Xanadu ServiceNow AI Platform Administration
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/xanadu/platform-administration

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu ServiceNow AI Platform Administration

ft:clusterId :

    - platadm

bundleId :

    - platadm

workflow :

    - Platform


---

# Configure an OAuth profile to use certificates for authentication with Microsoft Azure

# Configure an OAuth profile to use certificates for authentication with Microsoft Azure {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Configure an OAuth application profile to authenticate using
certificates.

## Before you begin

Create an [Microsoft Azure](https://portal.azure.com) account to configure OAuth profile.

Complete the set up steps using your Microsoft Azure Developer
account. See the [Microsoft Azure product documentation](https://docs.microsoft.com/en-us/azure/) for instructions
on creating and configuring custom applications.

Role required: admin and Microsoft Azure portal administrator

## Procedure

1. Log in to the Microsoft Azure registration profile with your organization credentials.  
   For more information, see the Microsoft Azure [registration portal
   documentation](https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade).
2. Register a new custom application by filling in the application name, supported account type, and redirect URL, and then select Register.  
   Note:  
   Enter the redirect URL in the following format: <kbd class="ph userinput">https://&lt;instance&gt;/oauth_redirect.do</kbd>.  
   An overview of the application's basic information is displayed.
3. Copy the client ID to a text file.  
   You will use this ID and the secret value generated in the next steps to register the app as a third-party OAuth provider on your ServiceNow instance. You use the application ID as the client ID when you connect the application to ServiceNow.
4. Enable the Mail.ReadWrite permission.
   1. In Microsoft Azure, navigate to ManageAPI permissions.
   2. Select Add a permission.
   3. Click the Microsoft Graph tile.
   4. Select Application Permissions.
   5. In the Select permissions field, enter <kbd class="ph userinput">Mail.ReadWrite</kbd>.
   6. Select the Mail.ReadWrite check box.
   7. Select Add permissions.
   {#configure-oauth-profile-using-certificates__substeps_ddd_zft_whb}
5. Select Grant admin consent for \<your organization name\>.
6. Select Yes to confirm.
7. Upload the certificate
   1. In Microsoft Azure, navigate to ManageCertificates \& secrets.
   2. Select upload certificate.
   3. Provide a description, a start date, and an expiration date and upload the certificate.
   {#configure-oauth-profile-using-certificates__substeps_dzd_nct_whb}
8. Copy the client ID and directory ID to a text file.
9. Navigate to OverviewEndpoints and copy the OAuth 2.0 token endpoint (v2) to a text file.

## What to do next

[Configure a JWT provider](https://servicenow-prod.fluidtopics.net/gCTyCvCBTFUeoQdWr42ucQ "Configure a JWT provider on the ServiceNow AI Platform to configure an OAuth application profile to authenticate using certificates.")
* **[Configure a JWT provider](https://servicenow-prod.fluidtopics.net/gCTyCvCBTFUeoQdWr42ucQ)**   
  Configure a JWT provider on the ServiceNow AI Platform to configure an OAuth application profile to authenticate using certificates.
* **[Generate a SHA-1 thumbprint](https://servicenow-prod.fluidtopics.net/Ie0HIoKHOfg1RsVp91l7rQ)**   
  Generate a SHA-1 thumbprint using the JWT provider's sys_id and JKS certificate's sys_id and certificate's alias to be added to the GraphCertificateOAuthTemplate script.
* **[Create OAuth API script](https://servicenow-prod.fluidtopics.net/b8hhfYNNHvB_RAgu8IzVEg)**   
  Create and duplicate OAuth API script for application registry.

**Related tasks**   

* [Activate Email - Support for Email Processing by Microsoft Graph API](https://servicenow-prod.fluidtopics.net/W0DLVUmLLLahmXhc1qbCXg "You can activate the Email - Support for Email Processing by Microsoft Graph API plugin (glide.email.graph) for Notifications if you have the admin role.")
* [Configure an OAuth profile to use a client ID and secret for token generation](https://servicenow-prod.fluidtopics.net/PKG8LpZwj3yP7298uKqgNg#microsoft-graph "Configure an OAuth profile using a client ID and client secret to create an email account for using Microsoft Graph (receive) in your email account type.")
* [Create an email account for Microsoft Graph (receive)](https://servicenow-prod.fluidtopics.net/9GY~GfNmI7fsVNPPwqOs_A "Create an email account for reading emails from Microsoft Exchange Online using Microsoft Graph Endpoints.")

*[\>]: and then