Salesforce Spoke Integration with ServiceNow using JWT - Support and Troubleshooting

Salesforce Spoke Integration with ServiceNow using JWT Summary On Salesforce end

From your Salesforce account, create a connected app. Configure the connected app to enable your Salesforce application to share data with your ServiceNow instance. Select Enable OAuth Settings and configure the authentication settings. Select Use Digital Signatures and upload a Java KeyStore (JKS) certificate. Select the OAuth scopes: Access and manage your data (api) Perform requests on your behalf at any time (refresh_token, offline_access) Specify ServiceNow instance URL in Callback URL in this format: https:// .service-now.com/oauth_redirect.do After creating the connected app, under OAuth Policies on the Edit Policies page, set these values: Field Value Permitted Users Admin approved users are pre-authorized IP Restrictions Relax IP Restrictions Record the values of Consumer Key (client_id) and Consumer Secret (client_secret). Configure user provisioning for the connected app as per your requirement Manage the connected app and add the profile of the user

On ServiceNow Instance end

Attach a Java Key Store certificate to the Salesforce spoke (follow documentation for all field/steps) System Definition > Certificates > New Field Description Name Salesforce Certificate Type Java Key Store Key store password Password associated with the certificate. Click the attachments icon (Attachments icon) and attach a JKS certificate. Click Validate Stores/Certificates to validate the certificate. Create a JWT signing key for the Salesforce spoke (follow documentation for all field/steps) System OAuth > JWT Keys > New Field Description Name Salesforce JWT Keys Signing Keystore Valid JKS certificate attached in the previous task. For example, Salesforce Certificate. Signing Algorithm Algorithm to sign with the JWT key. Signing Key Password Password associated with the signing key. Click Submit. Create a JWT provider for the Salesforce spoke (follow documentation for all field/steps) System OAuth > JWT Providers > New Field Description Name Salesforce JWT Provider Signing Configuration JWT signing key from the previous step. For example, Salesforce JWT Keys Right-click the form header, and click Save. The Standard Claims and Custom Claims related lists are displayed. In the Standard Claims related list, enter values for iss, sub, and aud. Name Description iss client_id of the connected app (from Salesforce) sub username of the user (Salesforce) aud Use the authorization server’s URL for the audience value: https://login.salesforce.com , https://test.salesforce.com , or https://site.force.com/customers Click Update. Register Salesforce as an OAuth Provider (follow documentation for all field/steps) System OAuth > Application Registry > New (What kind of OAuth application? > Connect to a third party OAuth Provider) Name Description Name Salesforce OAuth Client ID Consumer key that you generated during the Salesforce connected app configuration Client Secret Consumer secret that you generated during the Salesforce connected app configuration. Token URL OAuth server token endpoint. For production instance, enter https://login.salesforce.com/services/oauth2/token. For sandbox instance, enter https://test.salesforce.com/services/oauth2/token Default Grant type JWT Bearer Save the form. The system validates the OAuth credentials and populates the Redirect URLfield. The system populates OAuth Entity Profile with Grant Type as JWT Bearer. For example, OAuth Entity Profile is created with default Name, Salesforce JWT provider default_profile. Click Update. Create credential records for the Salesforce spoke (Test - Get OAuth Token) Connections & Credentials > Credentials > New Name Description Name Salesforce Credentials OAuth Entity Profile OAuth profile that you created when you registered the Salesforce connected app as an OAuth provider. For example, select Salesforce OAuth default_profile. Save the record. Test - Get OAuth Token RESULT : OAuth token flow completed successfully