Set up the Google Cloud Translator Service spoke

Integrate your Google account with your ServiceNow instance.

Before you begin

• Request an Integration Hub subscription.
• Activate the Google Cloud Translator Service spoke.
• Create a service account on Google Cloud, generate a service account key of JSON type and download it. For information on creating the service account key, see the Google documentation.
• Enable the Cloud Translation API service. For information on enabling a service, see the Google documentation.
• Role required: admin

Create a Java KeyStore certificate

Encrypt the security certificates obtained from Google by creating a Java KeyStore (JKS) file.

Before you begin

• Role required: admin

• Download a JSON file containing the service account key from Google. For information on downloading the JSON file, see the Google documentation. Following is a sample JSON file:

  {
    "type": "service_account",
    "project_id": "primeval-nectar-242610",
    "private_key_id": "0c6c7b1511f1c236c1300c5933d528bbf45314e5",
    "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n",
    "client_email": "service-now-google-trans-v3@primeval-nectar-242610.iam.gserviceaccount.com",
    "client_id": "113255944370425109391",
    "auth_uri": "https://accounts.google.com/o/oauth2/auth",
    "token_uri": "https://oauth2.googleapis.com/token",
    "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
    "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-now-google-trans-v3%40primeval-nectar-242610.iam.gserviceaccount.com"
  }
  

Procedure

1. In the JSON file, perform the following for the private_key value.

   1. Unescape the \n characters.

      Tip: To unescape characters in a JSON file, you can parse a JSON string into a JavaScript object.

   2. Store the private key in a file with .pem extension.

2. In the JSON file, perform the following for the client_x509_cert_url value.

   1. Open the link specified for client_x509_cert_url.

   2. Unescape the \n characters for the certificate associated with the private_key_id mentioned in the JSON file.

   3. Store the certificate value in a file with .pem extension.

3. Use the openssl command to create a PKCS 12 file using the recently created private key and certificate files.

   openssl pkcs12 -export -in [path to certificate] -inkey [path to private key] -certfile [path to certificate ] -out testkeystore.p12
   

   For example, if certificate.pem is the certficate and privatekey.pem is the private key:

   openssl pkcs12 -export -in certificate.pem -inkey privatekey.pem -certfile certificate.pem -out testkeystore.p12
   

   A PKCS 12 file, testkeystore.p12, is created.

4. Specify an export password or source keystore password.

   Note: You should specify this password when creating a JWT key for Google Cloud Translator Service spoke.

5. Use the keytool command to create a JKS file from the PKCS 12 file.

   keytool -importkeystore -srckeystore testkeystore.p12 -srcstoretype pkcs12 -destkeystore wso2carbon.jks -deststoretype JKS
   

   Note: testKeyStore.p12 is the PKCS 12 file and wso2carbon.jks is the JKS file.

6. Specify a destination keystore password.

   Note: You should specify this password when attaching a JKS certificate to Google Cloud Translator Service spoke.

Attach a Java KeyStore certificate to Google Cloud Translator Service spoke

Enable the JWT client authentication by attaching a valid Java KeyStore (JKS) certificate to Google Cloud Translator Service spoke.

Before you begin

• Role required: admin
• Valid Java KeyStore certificate

Procedure

1. Navigate to All > System Definition > Certificates.

2. Click New.

3. On the form, fill in the fields.

   Field	Description
   Name	Identifier of the certificate.
   Notify on expiration	Users to be notified when the certificate expires.
   Warn in days to expire	Number of days to send a notification before the certificate expires.
   Active	Option to activate the certificate.
   Type	Type of the certificate. Select Java Key Store.
   Expires in days	Number of days until the certificate expires.
   Key store password	Password to access the certificate. Use the destination keystore password specified when creating the JKS certificate. For more information on this password, see Create a Java KeyStore certificate.
   Short description	Summary about the certificate.

4. Click the manage attachments icon (

1. To validate the JKS certificate, click Validate Stores/Certificates.

2. Click Submit.

Create a JWT signing key for Google Cloud Translator Service spoke

Assign a JSON Web Token (JWT) signing key to your Java KeyStore certificate.

Before you begin

Role required: admin

Procedure

1. Navigate to All > System OAuth > JWT Keys.

2. Click New.

3. On the form, fill in the fields.

   Field	Description
   Name	Identifier of the JWT signing key.
   Signing Keystore	Valid JKS certificate for which you want to assign the key.
   Key Id	Key ID to identify which key is used when multiple keys are used to sign tokens.
   Signing Algorithm	Algorithm to sign with the key.
   Signing Key Password	Password associated with the key. Use the export password or the source keystore password specified when creating the JKS certificate. For more information on this password, see Create a Java KeyStore certificate.
   Active	Option to activate the key.

4. Click Submit.

Create a JWT provider for Google Cloud Translator Service spoke

Add a JSON Web Token (JWT) provider to Google Cloud Translator Service spoke.

Before you begin

Role required: admin

Procedure

1. Navigate to All > System OAuth > JWT Providers.

2. Click New.

3. On the form, fill in the fields.

   Field	Description
   Name	Identifier of the JWT provider.
   Expiry Interval (sec)	Number of seconds that indicate the lifespan of the JWT provider token. Specify 3600.
   Signing Configuration	JWT signing key.

4. Right-click the form header, and click Save.

5. In the Standard Claims related list, enter the values for these claims.

   Claim name	Claim value
   aud	https://www.googleapis.com/oauth2/v4/token
   iss	client_email value from the JSON file.

6. In the Custom Claims related list, create the scope claim and enter its value as https://www.googleapis.com/auth/cloud-translation.

7. Click Update.

Configure the credential for the GoogleTranslation alias

Authorize actions of Google Cloud Translator Service spoke by configuring the Google OAuth 2.0 credential.

Before you begin

Role required: admin

Procedure

1. Navigate to All > Connections & Credentials > Credentials.

2. Select the Google OAuth 2.0 credential.

3. Open the record specified in the OAuth Entity Profile field.

4. In the JWT Provider field, specify the JWT provider that you want to use.

5. Click Update.

6. To verify if an OAuth Access token is generated to connect to Google's translation services, click the Get OAuth Token related link of the Google OAuth 2.0 credential.

Configure the connection attributes for the GoogleTranslation alias

Connect to the Google's translation service by configuring the Google connection. Provide information that is used by HTTP(s) actions or activities to connect to that service.

Before you begin

Role required: connection_admin

Procedure

1. Navigate to All > Connections & Credentials > Connections.

2. Open for the record for Google.

3. In the Attributes related list of the HTTP(S) Connection form, fill in the fields.

1. Right-click the form header and click Save.