Adding the OAuth Configuration to AE Clients

Once you have finished configuring the OAuth server and a Password Exit for it, you need to add the configuration to all Automation Engine (AE) clients that need to use OAuth. These are the AE clients that will receive ServiceNow Service Catalog requests to process with the appropriate Workflows.

Prerequisites:

• You have completed the following tasks:
  • Installing and Configuring OAuth
  • Installing and Configuring a Password Exit
  • Encrypting the Client_Secret Key (and you have the encrypted value)
• A login user with administration rights for each Client that needs to use OAuth to integrate with SNSC.

To Add the OAuth Configuration to Clients

For each client that needs to use OAuth to integrate with SNSC, do the following:

1. Login to a Client (other than Client 0) as a user with administration rights.
2. In the Administration perspective, under User Management, add a "technical user" to receive the ServiceNow Service Catalog requests.The user name and password must match the values defined for the AEUser and AEPassword parameters in the configuration.properties file.

   Note: This will be the user that starts (creates) all the Workflow executions for ServiceNow requests that are processed on this Client.

3. In the Process Assembly perspective, find and open the OAUTH folder in the Explorer in the left panel.
4. Create the following VARA-STATIC variables:
   • OAUTH.AUTHORIZATION_CODES
   • OAUTH.ACCESS_TOKENS
   • OAUTH.REFRESH_TOKENS
5. Duplicate the variable OAUTH.SAMPLE_CLIENT.CLIENT_INFORMATION and, for the new variable, replace SAMPLE_CLIENT with the name of the client application, in this case SERVICE_NOW. That makes the new name OAUTH.SERVICE_NOW.CLIENT_INFORMATION.
6. Open the new OAUTH.SERVICE_NOW.CLIENT_INFORMATION variable , and define the following key values:
   • application_url: <the URL of the ServiceNow instance that will send the requests>
   • client_id: <The client_number of the SNSC>

     This is only the client_number of the Client ID in the SNSC configuration (just the middle part, without the AE_system_name or the user_name). For more information, see Configuring ServiceNow System Properties.

   • client_secret: <the encrypted secret key that was produces by your encryption tool as described in Encrypting the Client_Secret Key>
   • grant_types: Required values are password, refresh_token, authorization_code.
7. Optionally, while you are here, you can already prepare folders for the SNSC requests:
   • In the Explorer, create a folder called "SERVICES" where service catalogs can be created.
   • Create to publish workflows as Automic Services (for example, SERVICES/AUTOMIC_SERVICES).

You have completed updating all AE Clients where OAuth (for SNSC) will be used.

Next Steps: Continue with Installing and Configuring SAPI.