Skip to content
External Content Q&A Genius Results › Configuring Now Assist in AI Search › Now Assist in AI Search › ServiceNow Store applications and integrations › AI Search › Search administration › Configure core features › Administer the ServiceNow AI Platform
Release: Australia · Updated: 2026-06-08 · Official documentation · View source

Configure OAuth settings for External Content Q&A Genius Results

Configure the settings that External Content Q&A Genius Results need to interact with your Microsoft SharePoint Online instance.

Before you begin

The Now Assist in AI Search ServiceNow® Store application must be installed on your instance. For details on installing this application, see Install Now Assist in AI Search.

You must have already completed the following tasks:

You will need read access to the following Microsoft Azure Portal configuration settings for your Microsoft SharePoint Online instance:

  • Root site URL
  • Client ID
  • Client secret
  • Tenant ID
  • Authorization URL
  • Token URL
  • Token revocation URL
  • Redirect URL

Role required: admin

About this task

Administrators need to perform this one-time procedure to enable External Content Q&A Genius Results.

Procedure

  1. Create an Application Registry record:

    1. Navigate to All > System OAuth > Application Registry.

    2. Select New.

    3. Select Connect to a third party OAuth Provider.

    4. On the Application Registries form, fill in the fields:

      FieldValue
      NameEnter a name of your choice for the Application Registry record.
      Client IDEnter the client ID value from your Microsoft SharePoint Online configuration on Microsoft Azure Portal.
      Client SecretEnter the client secret value from your Microsoft SharePoint Online configuration on Microsoft Azure Portal.
      Default Grant typeSelect Authorization Code.
      Authorization URLEnter the fully qualified authorization URL for your Microsoft SharePoint Online source system in this format: https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/authorize. Replace <tenant-id> with your Microsoft SharePoint Online tenant ID, as found in your Microsoft Azure Portal settings.
      Token URLEnter the fully qualified token URL for your Microsoft SharePoint Online source system in this format: https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/token. Replace <tenant-id> with your Microsoft SharePoint Online tenant ID, as found in your Microsoft Azure Portal settings.
      Token Revocation URLEnter the fully qualified token revocation URL for your Microsoft SharePoint Online source system in this format: https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/token. Replace <tenant-id> with your Microsoft SharePoint Online tenant ID, as found in your Microsoft Azure Portal settings.
      Redirect URLEnter the fully qualified redirect URL for the Integration Hub subflow in this format: https://<instance-name>.service-now.com/oauth_redirect.do. Replace <instance-name> with your ServiceNow AI Platform® instance name, as specified in your Microsoft Azure Portal settings.

    5. Select Submit.

      The new Application Registry record appears in the table list view.

  2. Define an OAuth entity scope for your new Application Registry record:

    1. Open your new Application Registry record in form view by selecting it.

    2. In the OAuth Entity Profiles related list, verify that an OAuth entity profile record appears with Is default set to true and Grant type set to Authorization Code.

Image omitted: oauth-entity-profiles-related-list.png
OAuth Entity Profiles related list showing entity profile record with correct field values.
3.  Open the new OAuth entity profile record in form view by selecting its name.

4.  On the OAuth Entity Profile form, in the OAuth Entity Profile Scopes related list, double-click **Insert a new row**, then select the Lookup using list icon
Image omitted: icon-lookup-using-list.png
.
Image omitted: oauth-entity-profile-form.png
OAuth Entity Profile form with OAuth Entity Profile Scopes related list's Insert a new row… link highlighted.
Image omitted: oauth-entity-profile-lookup.png
OAuth Entity Profile form with OAuth Entity Profile Scopes related list's Lookup using list icon highlighted.
5.  On the OAuth Entity Scopes form, select **New**.
Image omitted: oauth-entity-scopes-new.png
OAuth Entity Scopes list view with New button highlighted.
6.  On the OAuth Entity Scope form, fill in the fields:
FieldValue
NameEnter a name of your choice for the connection and credential alias.
OAuth providerSelect or enter the name of the Application Registry record that you created in step 1.e.
OAuth scopeEnter offline_access https://<root-site>.sharepoint.com/.default, replacing <root-site> with the name of your Microsoft SharePoint Online instance's root site.Important: Make sure to include the dot before default.
7.  Select **Submit**.

8.  In the OAuth Entity Profile Scopes related list, select the Save \(Enter\) icon
Image omitted: IconSave.png
.
Image omitted: oauth-entity-scopes-save.png
OAuth Entity Profile form with OAuth Entity Profile Scopes related list's Save \(Enter\) icon highlighted.
    The new OAuth entity scope record appears in the OAuth Entity Profile Scopes related list.

9.  Select **Update**.

  1. Define a connection and credential alias record for Microsoft SharePoint Online:

    1. Navigate to All > Connections & Credentials > Connection & Credential Aliases.

    2. Open the MicrosoftSharePointOnlineforAISearch alias record in form view by selecting it.

    3. In the Connections related list, select New.

    4. On the HTTP(s) Connection form, fill in the fields:

      FieldValue
      NameEnter a name of your choice for the connection and credential alias.
      Connection URLEnter the fully qualified URL for your Microsoft SharePoint Online instance: https://<root-site>.sharepoint.com.

    5. To create your new connection record, select Submit.

      The new connection record appears in the Connections related list.

  2. Define a new OAuth 2.0 credential associated with your Application Registry record:

    1. Navigate to All > Connections & Credentials > Credentials.

    2. Select New.

    3. Select OAuth 2.0 Credentials.

    4. If the Integration Type field isn't visible on the OAuth 2.0 Credentials form, configure the form layout to make the field visible.

      For details on configuring a form layout, see Configuring the form layout.

    5. On the OAuth 2.0 Credentials form, fill in the fields:

      FieldValue
      NameEnter a name of your choice for the OAuth 2.0 credential record.
      OAuth Entity ProfileSelect the new OAuth entity profile record associated with the Application Registry record that you created in step 1.e.
      Integration TypeSelect Personal.

    6. Select Submit.

      The new OAuth 2.0 credentials record appears in the Credentials [discovery_credentials] table list view.

  3. Specify your new OAuth 2.0 credential as the one to use when connecting to Microsoft SharePoint Online:

    1. Navigate to All > Connections & Credentials > Connection & Credential Aliases.

    2. Open the MicrosoftSharePointOnlineforAISearch alias record in form view by selecting it.

    3. In the Connections related list, select the connection record that you created in step 3.e.

    4. On the HTTP(s) Connection form, select the Credential field's Lookup using list icon

Image omitted: icon-lookup-using-list.png
, then select the credential that you defined in step [4](configure-oauth-ext-cont-qna-gr.md).
5.  Select **Update**.

What to do next

You can optionally configure a Microsoft Keyword Query Language (KQL) query to restrict the set of Microsoft SharePoint Online sites that External Content Q&A Genius Results search for relevant documents. For details on defining this KQL query, see Restrict the Microsoft SharePoint Online sites that External Content Q&A Genius Results can search.

Parent Topic:External Content Q&A Genius Results