Set up the Guidewire spoke
Integrate the ServiceNow instance and Guidewire using basic Auth or OAuth 2.0 authentication to authenticate ServiceNow requests.
Before you begin
- Request an Integration Hub subscription.
- Activate the Guidewire spoke.
- Choose and implement the Guidewire authentication approach appropriate for your application. See the Guidewire documentation for Choosing an authentication flow for details.
- Ensure that the dependent plugins are activated.
- Role required: admin.
Register Guidewire as an OAuth provider
Use the information generated during the Guidewire application configuration to register Guidewire as an OAuth provider. OAuth provider registration enables the ServiceNow instance to request OAuth 2.0 tokens.
Before you begin
- Role required: admin
- Client ID and client secret generated from configuration of the third-party Guidewire application
Procedure
Navigate to All > System OAuth > Application Registry.
Select New.
The system displays this message:
What kind of OAuth application?.Select Connect to a third party OAuth Provider.
On the form, fill these values.
| Field | Description | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Name | Name to uniquely identify the record. For example, enter: `Guidewire OAuth` | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Client ID | <Client ID> created during the Guidewire account configuration. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Client Secret | <Client Secret> created during the Guidewire account configuration. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Authorization URL | OAuth authorization code endpoint. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Token URL | OAuth server token endpoint. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Token Revocation URL | OAuth server token revocation endpoint. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Redirect URL | OAuth callback endpoint in this format: `https://| OAuth API Script | Script to customize the request and response. | Logo URL | URL that contains an image to use as the application logo. | Default Grant Type | Grant type used to establish the token.. | Refresh Token Lifespan | Time, in seconds, that the refresh token is valid. The default time is 8,640,0000 seconds. | PKCE required | Option to enable public clients to require PKCE for an authorization.Note: You can use only Authorization Code as the Default Grant type when PKCE is enabled. | Application | Application scope that contains this record. | Accessible from | Application scope that this registry is accessible from. | Active | Option to actively use the application registry. | Use mutual authentication | Option to use mutual authentication for token request and revocation. This option requires a mutual authentication profile to be specified. | Send credentials | Option for whether or how to send authentication information identifying the application and its authorized users to the OAuth server. |
Create OAuth 2.0 credential record for the Guidewire spokeCreate credential records to the Guidewire custom OAuth application you created during Guidewire account configuration. The Guidewire spoke connection and credential aliases use these credentials to authorize actions in Guidewire application. The Guidewire connection and credential alias uses these credentials to authorize actions. Before you beginRole required: admin The following example shows the steps for creating a credential record for Guidewire PolicyCenter, Guidewire ContactManager, or Guidewire ClaimCenter. Procedure
Create Basic Auth credential record for the Guidewire spokeCreate a Basic Auth credential record for the Guidewire application. The Guidewire connection and credential alias uses these credentials to authorize actions in Guidewire PolicyCenter, Guidewire ContactManager, and Guidewire ClaimCenter. Before you beginRole required: admin The following example shows the steps for creating a basic Auth credential record for Guidewire PolicyCenter, Guidewire ContactManager, and Guidewire ClaimCenter. Procedure
Switch between basic Auth and OAuth 2.0 credentialYou can choose to switch between implemented basic Auth and OAuth 2.0 authentication based on your event or security needs. Before you begin
The following example shows the steps for switching from basic auth to OAuth 2.0 for the Guidewire ClaimCenter application. Procedure
What to do nextCreate connection record for the Guidewire spokeCreate a connection record for your Guidewire application. The Guidewire connection and credential aliases use these connections to perform actions in Guidewire PolicyCenter, Guidewire ContactManager, and Guidewire ClaimCenter. Before you beginRole required: admin The following example shows the steps for creating a connection record for Guidewire PolicyCenter, Guidewire ContactManager, or Guidewire ClaimCenter. Procedure
Get Guidewire OAuth tokenGenerate the Guidewire access token. Before you beginRole required: admin Procedure
ResultThe Guidewire spoke receives a new OAuth access token. |