Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Using Certificates for authentication

Request an access token with a certificate credential.

Before you begin

  1. You can either use a self-signed certificate or CA issued certificate. You can create a self-signed certificate by executing the PowerShell script as outlined in Setting up an Azure AD app for app-only access. The script generates two files: .PFX file and .CER file.

    Note: Ensure that you are aware of the password that is used to encrypt private key to generate the .PFX file and .CER file.

  2. Use the .PFX file to create a Java Key Store (JKS) file.

    Note: Ensure that you are aware of the password that is used to generate JKS file from the .PFX file.

Role required: admin

Procedure

  1. Navigate to App registrations in Azure AD portal.

  2. Select Certificates & secrets from the Manage section.

  3. In the Certificates tab, select Upload Certificate.

  4. On the form, fill these values.

    FieldDescription
    Upload a certificate (public key) with one of the following file types: .cer, .pem, .crt.CER file you had generated using the PowerShell script.
    DescriptionDescription of the certificate.
  5. Select Add.

    The certificate is uploaded and its details are displayed under the Certificates tab.

  6. Copy the Thumbprint value of the uploaded certificate.

    The Thumbprint value is a hexadecimal value.

Image omitted: ms-sharept-thumbprint.png
Thumbprint of the uploaded certificate.
  1. Encode the Thumbprint value to a Base64 value and record the value for later use.

    Note: You can use a Hexadecimal to Base64 (Hex to Base64) converter tool to encode the Thumbprint value to a Base64 value.

  2. Attach a Java Key Store certificate for MS Teams
    Enable the JWT Bearer Grant token authentication by attaching a valid Java Key Store (JKS) certificate.

  3. Configure the JWT signing key for MS Teams
    Create a JSON Web Token (JWT) signing key to assign to your Java Key Store certificate.
  4. Configure the JWT provider for MS Teams
    Add a JSON Web Token (JWT) provider to your ServiceNow instance.
  5. Establish a connection using certificates
    Establish a connection between newly created Microsoft Teams graph application using certificates.

Parent Topic:Establish MS Teams Graph connection on ServiceNow AI Platform