Property reference

`glide.oauth.jwt.reserved_claim_set`

Defines which JWT claim names are blocked from use as the JTI claim. By default, iss, sub, aud, exp, and iat are rejected; adding names to the list blocks the record when those claims are selected.

Default: iss,sub,aud,exp,iat
Type: Not stated
Application: Not stated
Category: Authentication & SSO

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	Lists JWT claim names that users cannot select as the JTI claim; selecting a reserved name displays an error and blocks the record.
What area does it affect?	OAuth JWT claim configuration
What does the default mean?	The default value is "iss,sub,aud,exp,iat".
When should you review it?	When changing which claim names users can select for the JTI claim.

Property record

No out of the box record exists. ServiceNow scripts read this property and use the default value shown until you create it.

Property name	`glide.oauth.jwt.reserved_claim_set`
Type	Not stated
Application	Not stated
Default value	`iss,sub,aud,exp,iat`
Description	Not stated

Sources

Official references and nearby text excerpts where this property appears.

Used in

Out of the box artefacts that read this property. Append the path to your instance URL to open the record and see how the value is used.

Business rule: Restrict reserved claims as jti claim This property is read by the business rule to determine which JWT claim names are reserved and cannot be chosen as the jti claim; matching choices are rejected with an error. If no value is set, the default reserved claims are iss, sub, aud, exp, and iat. /sys_script.do?sys_id=ca33c25dffb022100e77ffffffffff58

Business rule: Restrict reserved claims as jti claim When this rule runs, it reads the property as a comma-separated list of claim names that users cannot choose as the JTI claim; a match displays an error and blocks the record. Admins can change the list, which defaults to iss, sub, aud, exp, and iat if no value is provided. /sys_script.do?sys_id=d1427491ff7022100e77ffffffffff98

More in `glide.oauth`

Other properties in the same namespace.

glide.oauth.export.to.sheets.alias Sets which configured alias the Google Sheets export uses. glide.oauth.inbound.client.credential.grant_type.enabled This property allows the use of the client credentials grant type for OAuth inbound integrations, enhancing… glide.oauth.inbound.ropc.grant_type.disabled This property controls whether the resource owner password credentials grant type is allowed for inbound… glide.oauth.integration_registry.oob_clients This property defines a string of sys_ids representing the default out-of-box OAuth clients in ServiceNow. glide.oauth.mobile.intermediary_redirect.entity_ids This property configures which mobile apps receive an intermediary redirect page instead of a direct app… glide.oauth.mobile.intermediary_redirect.show_copy_button This property determines whether the OAuth auth code is displayed with a copy button on the intermediary… glide.oauth.oidc.blacklisted_metadata_urls This property allows administrators to define a list of OIDC metadata URLs that enforce the use of 'email'… glide.oauth.oidc.provision.email_claim This property defines the source field for the email claim used in OAuth-OIDC automatic user provisioning…

All 26 properties in glide.oauth →