Skip to content
Configure › Card Data Security › Dispute Management › Banking applications › Financial Services Operations \(FSO\)
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Set up OAuth for Card Data Security

After you configure your tokenizer service, follow these steps to set up OAuth connectivity with your ServiceNow instance. This connection is required to get file metadata and download URLs from files hosted in the tokenizer service vault.

Token Authentication in Card Data Security

Card Data Security uses JSON Web Tokens (JWT) for authentication. It uses the following token types for authentication:

  • Regular tokens—used for authentication in backend connections.
  • Context-aware tokens—required for user interactions in the UI, such as viewing documents in the data vault.

Set up card network integration

When you set up OAuth for card network integration, set up each following connection type.

NameConnection AliasDescriptionProcedure
Service TokenCardDataSecurity.ServiceTokenFor Vault API interactions and backend requests, such as retrieving file download URLs or external document metadata.Perform all the following steps for this connection type.
Client TokenCardDataSecurity.ClientTokenFor obtaining context-aware bearer tokens that are used in detokenization requests. Used for viewing files and revealing PAN values.Perform all the following steps for this connection type.
Data Token SignerCardDataSecurity.DataTokenSignerRequired for context-aware authorization. Signs data tokens that are used to make detokenization requests to the data vault. Used for revealing PAN values.Refer to Set up a Token Signer for specific steps on this connection type.
  1. Create a JKS file
  2. Create an X.509 Certificate
  3. Set up a JWT key
  4. Set up a JWT Provider
  5. Set up an OAuth Provider
  6. Set up the Connection & Credential records
  7. Set up a credential
  8. Set up the API REST message

Set up Verifi integration

Prepare the following values before you set up this integration. Obtain these values from your Verifi onboarding documentation or account manager, and from your tokenizer service connection setup procedure.

  • Signing algorithm: typically HMAC256 (confirm with Verifi).
  • JWT Signing Key: a unique key provided by Verifi.
  • JWT Expiry Interval: value in seconds, provided by Verifi.
  • Issuer ID: provided by Verifi.
  • API Version: provided by Verifi.
  • Tokenizer service connection URL: URL used to route requests to Verifi's APIs.
  • Tokenizer service API key: provided by the tokenizer service during connection setup.

Perform the following tasks:

  1. Set up a JWT key
  2. Set up a JWT Provider
  3. Set up the Connection & Credential records
  4. Set up a credential
  6. Set up the API REST message