Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Configure a JWT provider

Configure a JWT provider on the ServiceNow AI Platform to configure an OAuth application profile to authenticate using certificates.

Before you begin

Upload a Java Key Store (JKS) certificate. Attach a JKS certificate containing the certificate uploaded on Microsoft Azure to your instance to use when enabling the JWT client authentication. For more information, see Upload Java Key Store certificate.

Create a JWT signing key to assign to your JKS certificate. For more information, see Configure a JWT signing key.

Role required: admin

Procedure

  1. Add a JWT provider to your ServiceNow instance and fill in the claim values.
Claim NameClaim Value
audhttps://login.microsoftonline.com/{tenantId}/oauth2/v2.0/tokenNote: The tenant ID should be replaced with the directory ID copied from Microsoft Azure.
issClient ID copied from Microsoft Azure
subClient ID copied from Microsoft Azure
For more information, see [Create a JWT provider with a JWT signing key](../platform-security/authentication/JWT-Bearer-token-support.md).
  1. From the JWT Provider record menu, select Copy sys_id and copy the JWT provider sys_id.

What to do next

Generate a SHA-1 thumbprint

Parent Topic:Configure client credential flow for SMTP OAuth2 using certificate-based authentication