Service Desk - OAuth authentication

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

I am trying OAuth authentication to service desk application. We are using client credentials type authentication. its working through post man and i am able to get token.

But when i tried through SailPoint getting 'invalid client credentials". Below parameters i have added in Service desk application debug page.
Authentication type : OAuth
GrantType : Refresh_token
Client Id : Client Id added
Client secret : Client secret added
Toekn Url : token url added
Refresh_token : Not sure what to add in this field

Can anyone help me what to pass in ‘Refresh_Token’ field ?

regards,
Krishna.

2

@KrishnaReddy -

What goes into the Refresh Token box?

Exactly the refresh token string returned by the service-desk platform (ServiceNow, Cherwell, JIRA …).
You have to generate it once outside IIQ – typically with Postman or curl – using the authorisation-code or password flow that your ticketing system supports.
The sequence is normally:

  1. Create / register an OAuth client in the service-desk system and allow the offline_access (refresh-token) scope.
  2. Perform an initial token call (authorisation-code or password grant).
  3. Copy the refresh_token value from that response.
  4. Paste it into Refresh Token on the IIQ debug page (or in the XML).
  5. Keep Grant Type = Refresh_token; IIQ will swap the refresh token for a new access token whenever it expires.

You can also ask the refresh token from the Application Team, If you don’t have all the details.

For Service Now, Below are the detailed steps to generate the Refresh Token -
To generate a refresh token in ServiceNow, you need to follow these steps:

  1. Navigate to System OAuth > Application Registry.
  2. Click New to create a new OAuth application.
  3. Fill in the necessary details like Name, Client ID, Client Secret, etc.
  4. In the “Refresh Token Lifespan” field, enter the lifespan of the refresh token in seconds.
  5. Save the application.
  6. Now, to generate the refresh token, you need to make an HTTP POST request to the ServiceNow OAuth token endpoint (https://.service-now.com/oauth_token.do).
  7. The request should include the following parameters:
  • grant_type: Set this to “password”.
  • client_id: The Client ID of your OAuth application.
  • client_secret: The Client Secret of your OAuth application.
  • username: The username of the ServiceNow user.
  • password: The password of the ServiceNow user.
  1. The response of this request will include an access token and a refresh token.
  2. You can use the refresh token to get a new access token when the current one expires.

Please note that the refresh token is only provided if the “Refresh Token Lifespan” field in the OAuth application is set to a value greater than 0.

Thank you!

1 Like
3

@officialamitguptaa Thanks for your response.

After i discussed with few people, i came to know if Application support client credentials type authentication , then in SailPoint application debug page should use grant type as ‘CLIENT_CREDENTIALS’.
Is this correct? If yes would you pls help me what details need to add in debug page?

4

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.