Set up the Microsoft Azure DevOps Boards spoke using OAuth

Integrate the ServiceNow instance and Azure DevOps Boards using OAuth 2.0 authentication to authenticate ServiceNow requests.

Before you begin

• Request an Integration Hub subscription.
• Activate Azure DevOps Boards spoke
• Role required: admin.

Important:

• If you are setting up the Azure DevOps Boards spoke using OAuth, you need not set up the spoke using personal access token.
• If the Azure DevOps Boards spoke is already configured and set up, ensure that you set the value of Active to false for the existing connection before you proceed to set up the spoke using OAuth.

Register an application using the Microsoft Azure portal

Provide authorization to the ServiceNow instance by registering an application in the Microsoft Azure portal.

Before you begin

Role required: admin.

About this task

Complete these steps from the Microsoft Azure portal.

Procedure

1. Log in to the Microsoft Azure portal as an admin.

2. Click App Registrations.

3. Click New registration.

4. On the form, fill in fields as per your requirement.

   For Redirect URI, specify the ServiceNow instance URL in this format: https://<ServiceNow-Instance-Name>.service-now.com/oauth_redirect.do.

1. Click Register.

   The application is created and the values of Application (client) ID and Directory (tenant) ID are displayed.

1. Copy and record the values of Application (client) ID and Directory (tenant) ID.

2. Generate a client secret for the application.

   1. Under Manage, click Certificates & secrets.

   2. Click New client secret.

   3. On the form, enter provide a description and specify the duration after which the secret expires.

   4. Click Add.

    The client secret is created and its value is displayed.

5.  Copy the value of client secret for later use.

1. Provide the required API permissions to the application.

   1. Under Manage, click API permissions.

   2. Click Add a permission.

   3. Under Microsoft APIs, click Azure DevOps.

4.  Expand **vso** and select these permissions **vso.project\_manage** and **vso.work\_full**.

    The **User.Read** permission under **Microsoft Graph** is selected by default. Configure other permissions as per your requirement.

5.  Click **Grant admin consent for ServiceNow**.

6.  When prompted, confirm your choice to grant admin consent for ServiceNow.

Result

An application has been registered in Microsoft Azure portal. You can use this application to connect to your Azure DevOps project from ServiceNow instance.

Create a connection record for the Microsoft Azure DevOps Boards Spoke

Create a connection record that enables the ServiceNow instance to send connection requests to the Microsoft Azure DevOps Boards.

Before you begin

Role required: admin

Procedure

1. Navigate to All > Process Automation > Workflow Studio.

2. Select Integrations.

3. In the Search all connections field, enter Azure DevOps Boards.

   Confirm that the Outbound tab is selected.

4. In the Azure_DevOps_Boards tile, select View Details.

1. Select Configure.

2. Fill the form.

   Field	Description
   Connection Name	Option to provide the name of the connection record. The default and read-only name of the first connection record that you create is Azure_DevOps_Boards.
   Connection URL	Option to provide the endpoint that the alias uses to interact with your Azure DevOps environment.
   Client ID	Option to provide the client ID that you generated while registering an application on Microsoft Azure portal.
   Client Secret	Option to provide the client secret that you generated while registering an application on Microsoft Azure portal.
   OAuth Redirect URL	Option to provide the redirect URL. You must provide the redirect URL in the format https://<your-instance-name>.service.now.com/oauth_redirect.do.
   Tenant ID	Option to provide the tenant ID that you generated while registering an application on Microsoft Azure portal.

1. Select Create and Get OAuth Token.

   You log in to the Microsoft Azure portal and upon successful authentication, OAuth token is issued.