{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":19103,"path":"healthcare-life-sciences/create-identity-provider-hco.md","title":"Create and Configure an Identity Provider in ServiceNow to Authenticate with Epic","bundle":null,"doc_type":null,"release":"australia","body":"\n# Create and Configure an Identity Provider in ServiceNow to Authenticate with Epic\n\nSet up an Identity Provider in your ServiceNow instance to enable OIDC for Healthcare Operations Core.\n\n## Before you begin\n\nEnsure that the com.snc.integration.sso.multi.installer plugin is installed on your instance.\n\n**Note:** For the following process to be successful, the following script includes need to be available in Global scope:\n\n-   **MultiSSO\\_OIDC\\_CTO**\n-   **OAuthUtilEpic**\n\nIf these script includes are in HCLS application scope, they must first be cloned into Global scope before proceeding.\n\nRole required: admin\n\n## Procedure\n\n1.  Navigate to **All** &gt; **Multi-Provider SSO** &gt; **Identity Providers**.\n\n2.  Select **New**.\n\n3.  Under What kind of SSO are you trying to create, select **OpenID Connect**.\n\n4.  In the Import OpenID Connect Well-Known Configuration window, enter the following fields:\n\n    -   Name – Enter a name for your Identity Provider \\(for example, Epic OIDC\\)\n    -   Client ID – Input the Client ID created from your FHIR app on fhir.epic.com.\n    -   Well-Known Configuration IRL – Enter `[https://fhir.epic.com/interconnect-fhir-oauth/api/FHIR/R4/.well-known/openid-configuration](https://fhir.epic.com/interconnect-fhir-oauth/api/FHIR/R4/.well-known/openid-configuration)`.\n\n        **Note:** Verify this value with Epic as it may be different for your environment.\n\n5.  Select **Import.**\n\n6.  Navigate to **All** &gt; **Multi-Provider SSO** &gt; **Identity Providers**.\n\n7.  Select the Identity Provider you wish to configure.\n\n8.  Set the ServiceNow Homepage value to `https://<instance-name>.service-now.com/careteam`.\n\n9.  Navigate to the OIDC Provider Configuration related list and open the OIDC provider record.\n\n10. Update the following fields:\n\n    1.  User Claim – enter **preferred\\_username**.\n    2.  User Field – select **User ID**.\n    3.  OIDC Metadata URL - Enter to your FHIR server \\(Interconnect\\) URL endpoint. For example, from [https://fhir.epic.com/interconnect-fhir-oauth/api/FHIR/R4/.well-known/openid-configuration](https://fhir.epic.com/interconnect-fhir-oauth/api/FHIR/R4/.well-known/openid-configuration) to [https://yourinterconnectendpoint/.well-known/openid-configuration/](https://yourinterconnectendpoint/.well-known/openid-configuration/).\n11. Click **Update**.\n\n12. In the Identity Provider, navigate to the Advanced related list.\n\n13. Update the Single Sign-On Script field to **MultiSSO\\_OIDC\\_CTO**.\n\n14. Ensure the **Active** field is set to true.\n\n15. Click **Save**.\n\n16. Navigate to the OIDC Entity related list.\n\n17. Select the OIDC entity record.\n\n18. In the OAuth API Script field, select **OAuthUtilEpic**.\n\n19. Click **Update**.\n\n\n## Result\n\nAn Identity Provider has been created and configured based on the information provided by the well-known configuration.\n\n"}}