Disabling the OAuth 2.0 Consent screen
The ServiceNow OAuth 2.0 protocol adds a Consent Screen by default, which adds an intermediate screen in the onboarding flow of the users. We do recommend you configure ServiceNow to remove this screen. This page explains the procedure to achieve this objective.
References
ServiceNow OAuth2 is not fully documented. This page is based on:
ServiceNow ticket:
Key points
To configure the OAuth 2.0 authorization without a Consent screen, perform the following:
Create an Application Registry with some extra settings
Add two extra configuration keys in the kbot configuration
Update the Konverso Kbot for Snow virtual agent configuration.
Update the Application Registry layout
Open the list of the Application Registry object, and click on the wheel button on the layout:
Add the “Disable consent screen” field to the Selected column:
From now on, you will see this field in the List and Object inspectors of the Application Registry.
Application Registry creation
If you already have an application registry, keep it and create a new one. It is not possible to update an existing Application Registry entry.
You need to create an Application Registry object, just like stated in the page:
But there you need to add two extra settings:
Public Client: True
Disable Consent Screen: True
See the following screenshot that contains a valid configuration where the consent screen is disabled:
Updating Konverso Kbot for Snow Virtual Agent configuration
To enable the OAuth 2.0 authorization in Konverso Kbot for Snow Virtual Agent, you need to modify its configuration.
First, request the Konverso support team to add a new pair of OAuth2 unique variables to your environment:
snow_oauth2_challenge_secret =
snow_oauth2_verifier_secret =
Ensure that your bot is pointing to the right OAuth2 Application Registry object, by updating the two following variables:
snow_oauth2_client_id =
snow_oauth2_client_secret =
Test
Log out and re-login using the “Log in with ServiceNow” button:
If your configuration is correct, you should be directly redirected to the back office of Kbot for Snow Virtual Agent instead of getting the Consent Screen.