Thursday, 18 January 2024

servicenow mutual authentication

servicenow rest message mutual authentication :



https://letsdotechold.medium.com/mutual-auth-nginx-and-servicenow-8ece3f7ac602

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0696002



servicenow side :


you need a client certificate provided by server in java keystore format(contains certs and private key)



you need servers certificate PEM.



Create protocol profile with custom protocol name: myhttps, specify port as 443 or any other 


associated it with client certs(java keystore)



in REST MESSAGES, define your endpoint https://my_remote_api.com, then select mutual authentication and use your protocol profile created


then servicenow will display it as myhttps://my_remote_api.com but when it call, it will call my_remote_api.com:443. 


then it will check server certificate using server certificate u stored as PEM, then validated using CA 


then send over client certs 


No comments:

Post a Comment