{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40459,"path":"platform-security/authentication/config-private-key-jwt-oidc-sso.md","title":"Configure Private Key JWT for OIDC based SSO","bundle":null,"doc_type":null,"release":"australia","body":"\n# Configure Private Key JWT for OIDC based SSO\n\nConfigure Private Key JWT for OIDC based SSO integrations.\n\n## Before you begin\n\nRole required: oauth\\_admin\n\nYou must perform the following tasks before choosing Private Key JWT for OIDC based SSO.\n\n-   [Upload Java Key Store certificate](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/JWT-Bearer-token-support.md): Attach a JKS certificate to your instance to use to enable the JWT client authentication.\n-   [Configure a JWT signing key](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/JWT-Bearer-token-support.md): Create a JWT signing key to assign to your Java KeyStore \\(JKS\\) certificate.\n\n    **Note:** If you want to add **X.509 Certificate SHA-1 Thumbprint int \\(x5t\\)** to the header as part of the JWT Key, you must configure the form and add the **X.509 Certificate SHA-1 Thumbprint int \\(x5t\\)** field.\n\n-   [Create a JWT provider with a JWT signing key](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/JWT-Bearer-token-support.md): Add a JWT provider to your ServiceNow instance.\n\nTo include a JWT Key for OIDC based Identity Provider, you must:\n\n-   Install the **Integration - Multiple Provider Single Sign-On Installer** \\(`com.snc.integration.sso.multi.installer`\\) plugin.\n-   Enable the properties for **Multiple Provider SSO Properties**. For more information, see [Multi-Provider SSO properties, tables, and scripts](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/r_InstalledWithMultiProviderSSO.md).\n-   Create an OIDC Identity Provider. For more information, see [Create an OpenID Connect \\(OIDC\\) configuration for Single Sign-On \\(SSO\\)](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/create-OIDC-configuration-SSO.md).\n\n## Procedure\n\n1.  Navigate to **All** > **System OAuth** > **Application Registry**.\n\n2.  Select the OIDC Identity Provider that you had created.\n\n3.  On top of the form, select **Configure** > **Form Design**.\n\n    **Note:** You must add **Send Credentials** and **JWT Provider** fields to the form to use the Private Key JWT for OIDC based Identity Provider authentication requests.\n\n4.  Choose the **As Private Key JWT** for Send Credentials.\n\n5.  Select the **JWT Provider**.\n\n    \\[Omitted image \"jwt-oidc-sso.png\"\\]\n\n    When the user authenticates, the authentication page has options to login through Okta.\n\n\n"}}