| \n\nField\n\n | \n\nDescription\n\n |
|---|---|
| \n\n**Name of OAuth entity**\n\n | \n\nName of the OAuth entity.\n\n |
| \n\n**Provider name**\n\n | \n\nEnter the name of the service provider you want to integrate with. Example: Microsoft, Google, Zoom, SAP, etc.**Note:** Provider name is a mandatory field.\n\n |
| \n\n**Redirect URL**\n\n | \n\nURL to which the authorization code should be sent after authentication.\n\n |
| \n\n**Client ID**\n\n | \n\nUnique ID assigned to identify the application.\n\n |
| \n\n**Client Secret**\n\n | \n\nThe secret key that only the application and the authorization server can identify. The application uses this key to authenticate and obtain access tokens.\n\n |
| \n\n**Comments**\n\n | \n\nAdd any notes about this configuration.\n\n |
| \n\n**Active**\n\n | \n\nSelect to use for authentication and authorization requests; when unselected, the record is saved but remains inactive and will not process any requests.\n\n |
| \n\n**This is a public client check box**\n\n | \n\nSelect the if the application can’t securely store credentials, and doesn’t require a secret key to prove its identity during authorization. The client secret information is processed for public clients.\n\n |
| \n\nField\n\n | \n\nDescription\n\n |
|---|---|
| \n\n**Enforce token restriction**\n\n | \n\nThe Enforce token restriction option limits the client to accessing only the APIs specified in the REST API Access Policies. If you unselect it, the client can access other REST APIs based on the user ACL permissions.\n\n |
| \n\n**Token Format**\n\n | \n\nFormat of token to generate. Options: - JWT\n- Opaque\n**Note:**\n\n- The jwks url is available in the location: `api/now/oauth/jwks`.\n- The rotated \\(inactive keys\\) from jwks response is removed after 105 days default.\n\n\n |
| \n\n**Access token lifespan**\n\n | \n\nDuration \\(in seconds\\) for which the OAuth access token remains valid before it expires.**Note:** The default value is 1800 seconds.\n\n |
| \n\n**Refresh token lifespan**\n\n | \n\nDuration \\(in seconds\\) for which the OAuth refresh token remains valid before it expires.**Note:** The default value is 8,640,000 seconds.\n\n |
| \n\n**Login URL**\n\n | \n\nHTTP redirection endpoint to authenticate with the authorization server.\n\n |
| \n\n**Logo URL**\n\n | \n\nWeb address of an image that represents the application during the authentication and authorization process. It’s displayed on the authorization server's consent screen to help you recognize the requesting application.\n\n |