/
Disabling the OAuth 2.0 Consent screen

Disabling the OAuth 2.0 Consent screen

The ServiceNow OAuth 2.0 protocol adds a Consent Screen by default, which adds an intermediate screen in the onboarding flow of the users. We do recommend you configure ServiceNow to remove this screen. This page explains the procedure to achieve this objective.

References

ServiceNow OAuth2 is not fully documented. This page is based on:

  • ServiceNow ticket:

Key points

To configure the OAuth 2.0 authorization without a Consent screen, perform the following: 

  • Create an Application Registry with some extra settings

  • Add two extra configuration keys in the kbot configuration

  • Update the Konverso Kbot for Snow virtual agent configuration.

Update the Application Registry layout

  • Open the list of the Application Registry object, and click on the wheel button on the layout:

image-20240319-123043.png
  • Add the “Disable consent screen” field to the Selected column:

image-20240319-123149.png

From now on, you will see this field in the List and Object inspectors of the Application Registry.

Application Registry creation

If you already have an application registry, keep it and create a new one. It is not possible to update an existing Application Registry entry.

You need to create an Application Registry object, just like stated in the page:

But there you need to add two extra settings:

  • Public Client: True

  • Disable Consent Screen: True

See the following screenshot that contains a valid configuration where the consent screen is disabled:

Updating Konverso Kbot for Snow Virtual Agent configuration

To enable the OAuth 2.0 authorization in Konverso Kbot for Snow Virtual Agent, you need to modify its configuration.

First, request the Konverso support team to add a new pair of OAuth2 unique variables to your environment:

snow_oauth2_challenge_secret = snow_oauth2_verifier_secret =

Ensure that your bot is pointing to the right OAuth2 Application Registry object, by updating the two following variables:

snow_oauth2_client_id = snow_oauth2_client_secret =

Test

  • Log out and re-login using the “Log in with ServiceNow” button:

 

If your configuration is correct, you should be directly redirected to the back office of Kbot for Snow Virtual Agent instead of getting the Consent Screen.

 

Related content

Configuring OAuth 2.0
Configuring OAuth 2.0
More like this
Impersonate API Service
Impersonate API Service
More like this