Create an OAuth 2.0 integration in Jira account

Set up the Jira spoke for Jira Cloud Set up the Jira spoke for Jira Cloud

Integrate your ServiceNow instance with the Jira Cloud instance to authenticate the requests from ServiceNow .

Request an Integration Hub subscription Activate the Jira spoke Role required: admin

You can set up the Jira spoke for your Jira Cloud instance using basic authentication or OAuth authentication as per your requirement.

Option 1: Using basic authentication

Integrate the ServiceNow instance and Jira Cloud instance using an API key to authenticate ServiceNow requests.

Demonstrates integrating the ServiceNow instance and Jira Cloud instance using an API key

Role required: admin.

You can integrate a ServiceNow instance with multiple Jira instances. For this integration, create a connection and credential alias record and a connection record for each Jira instance.

Generate an Atlassian account API token

Generate an Atlassian account API token to authenticate requests for spokes associated with an Atlassian account.

Make sure you have an Atlassian account.

Role required: Atlassian administrator credentials

Complete these steps from your Atlassian account. See the Atlassian Developer portal documentation for instructions on generating your API token. Note: This procedure is applicable only if you're using the Jira Cloud subscription.

Log in to Atlassian Start as an admin. Go to your account profile photo and select Account Settings .

Go to Security . In the API token section, select Create and manage API tokens . Select API token . On the form, provide an integration name for the Label field. Select Create .

The API token is generated. Select Copy and record the value of the API token for later use.

Use your API token to configure the cloud connection for a Jira or Jira Service Management spoke.

Configure a connection for Jira spoke

Add and configure a Jira connection to authenticate ServiceNow requests in Jira spoke.

Role required: admin

Navigate to Process Automation > Flow Designer . Click the Connections tab. Locate the Jira connection alias and click View Details . To configure the default connection and credential alias record that is shipped along with the Jira spoke, click View Details . To manage more than one Jira spoke connection records, you should create a new child alias record by clicking Add Connection . For more information about using multiple connections, see Support multiple connections . If you are configuring the spoke for the first time, click Configure . Otherwise, click Edit . On the Connection form, fill in the fields. Field Description Connection Name Name to uniquely identify the connection. For example, Jira spoke cloud basic conn. Connection URL URL of your Jira instance in this format: https:// .atlassian.net. Server Type Select cloud . User name Enter the email address of the user. API Key Enter the API token you generated for your Jira Cloud instance.

Click Create Connection .

Option 2: Using OAuth authentication

Integrate the ServiceNow instance with your Jira account using OAuth to authenticate ServiceNow requests.

Role required: admin.

Create an OAuth 2.0 integration in Jira account

Create an OAuth 2.0 integration in Atlassian Developer console to authenticate the requests.

Role required: admin

Log in to Atlassian Developer console as an admin. Under My apps , click Create and select OAuth 2.0 integration .

On the form, provide name of the integration and click Create .

The integration is created and the value of App ID is displayed. Click Authorization . Click Add under Action .

In Callback URL , provide URL of your ServiceNow instance in this format: https:// .service-now.com/oauth_redirect.do. For example, https://example.service-now.com/oauth_redirect.do

Click Save Changes .

Click Settings . Under Authentication details , copy the values of Client ID and Client Secret .

Click Permissions . In Classic scopes , ensure that you select these scopes. manage:jira-configuration manage:jira-project manage:jira-webhook read:jira-work read:jira-user write:jira-work

In Granular scopes , ensure that you select these scopes. delete:sprint:jira-software read:issue-details:jira read:jql:jira read:sprint:jira-software write:sprint:jira-software read:board-scope:jira-software read:project:jira

You can configure other scopes as per your requirement.

Obtain the value of Cloud ID

Obtain the value of Cloud ID of the Jira Cloud instance. This value is required during the configuration of the connection record in your ServiceNow instance.

Role required: admin

Log in to Atlassian Administration as an admin. Click Select against the required organization. From the Jira Software product, click Manage product access . A new window is opened and the URL is in this format: https://admin.atlassian.com/s/ /apps. Copy the value of the Cloud ID for later use.

Create an application registry in ServiceNow instance

Use the information generate while creating the OAuth 2.0 integration to create an application registry record in your ServiceNow instance.

Role required: admin

Navigate to All > System OAuth > Application Registry . Click New . The system displays the message What kind of OAuth application? . Select Connect to a third party OAuth Provider . On the form, fill these values. Field Description Name Name to identify the application registry record. For example, Jira cloud OAuth app registry. Client ID Client ID generated when the OAuth 2.0 integration was created in Atlassian Developer console. Client Secret Client secret generated when the OAuth 2.0 integration was created in Atlassian Developer console. Default Grant type Grant type used to establish the token. Select Authorization Code . Authorization URL OAuth authorization code endpoint. Enter: https://auth.atlassian.com/authorize. Token URL OAuth server token endpoint. Enter: https://auth.atlassian.com/oauth/token. Redirect URL OAuth callback endpoint. System generates the URL upon saving the application registry. Refresh Token URL URL to refresh a token. Enter: https://auth.atlassian.com/oauth/token. Note: This field is hidden in the form layout. Configure the form layout to show this field.

In the OAuth Entity Scopes tab, create these entity scope records. Name OAuth scope delete:sprint:jira-software delete:sprint:jira-software manage:jira-configuration manage:jira-configuration manage:jira-project manage:jira-project manage:jira-webhook manage:jira-webhook offline_access offline_access read:issue-details:jira read:issue-details:jira read:jira-user read:jira-user read:jira-work read:jira-work read:jql:jira read:jql:jira read:sprint:jira-software read:sprint:jira-software write:jira-work write:jira-work write:sprint:jira-software write:sprint:jira-software read:board-scope:jira-software read:board-scope:jira-software read:project:jira read:project:jira

Right-click the form header and click Save . Click the OAuth Entity Profiles tab and open the default record. For example, Jira OAuth Profile . In OAuth Entity Profile Scopes , ensure that the same entity scopes are provided. Else, insert new rows and select the same entity scopes you had earlier provided in the OAuth Entity Scopes tab. Right-click the form header and click Save .

Create credential record for the Jira spoke

Create a credential record for the Jira account. The Jira spoke connection and credential alias uses this credential to authorize actions.

Role required: admin

Navigate to All > Connections & Credentials > Credentials . Click New . The system displays the message What type of Credentials would you like to create? Select OAuth 2.0 Credentials . On the form, fill these values. Field Description Name Name to identify the credential record for the Jira spoke. For example, Jira cloud OAuth credential. OAuth Entity Profile Default OAuth entity profile record created when the application registry record is configured.

Click Submit .

Create a connection record for the Jira spoke

Create a connection record for the Jira account. The connection and credential alias uses this connection to perform actions in Jira .

Role required: admin.

Navigate to All > Connections & Credentials > Connection & Credential Aliases . Open the alias record for Jira that shipped with the spoke. On the Connections tab, click New . The system displays a blank HTTP(s) Connection form. Enter these values and click Submit . Field Value required Name Enter any name to uniquely identify the connection record. For example, enter Jira cloud OAuth Connection. Credential Select the Credential record created for Jira. For example, select Jira cloud OAuth credential . Connection URL Enter the URL of your Jira instance in this format: https://api.atlassian.com/ex/jira/ . For information about obtaining the value of Cloud ID, see Obtain the value of Cloud ID .

In the Attributes related list, provide these values. Enter the value 2 for api_version . Enter the value cloud for server_type .

Click Submit . Navigate to All > Connections & Credentials > Credentials . Open the credential record you had created for the Jira spoke. For example, Jira OAuth credential . Click the Get OAuth Token related link. In a new window, system requests access to your Atlassian account. Click Accept . Access is granted to Atlassian account and a confirmation message is displayed in your ServiceNow instance that the refresh token is available.