Configure OAuth authentication for Qualys REST messages

---
title: Configure OAuth authentication for Qualys REST messages
description: Configure your Qualys Vulnerability Integration to authenticate with Qualys using OAuth instead of Basic Authentication.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/configure-qualys-oauth-authentication.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-08-04"
reading_time_minutes: 1
breadcrumb: [REST messages, Understanding the Qualys Vulnerability Integration, Vulnerability Response integrations, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Configure OAuth authentication for Qualys REST messages

Configure your Qualys Vulnerability Integration to authenticate with Qualys using OAuth instead of Basic Authentication.

## Before you begin

Roles required:

-   admin
-   sn\_vul.vulnerability\_admin
-   web\_service\_admin and oauth\_admin

## About this task

By default, the **Authentication method** integration parameter for the Qualys Vulnerability Integration is set to use **Basic Authentication**. Setting it to **OAuth** only stops the integration from applying **Basic Authentication** credentials to REST messages, it doesn't configure **OAuth** authentication. Complete the following tasks, in order, to switch to **OAuth**.

## Procedure

1.  Enable OAuth authentication for Qualys REST messages.

    1.  Navigate to **All** > **Vulnerability Response** > **Administration** > **Setup Assistant** > **Integration Configuration** > **Scanner Integrations**.

    2.  Select **Edit** next to your Qualys Vulnerability Integration.

    3.  Select **Advanced Settings** to open the Qualys Integration record.

    4.  Set the value of the **Authentication method** parameter on the Integration record to **OAuth**.

2.  Create an OAuth application registry.

    This registry stores the credentials the REST message uses to request a token from Qualys.

    1.  Navigate to **All** > **System OAuth** > **Application Registry**.

    2.  Select **New**.

    3.  Select **Connect to a third party OAuth Provider - Outbound**.

    4.  Enter a **Name** for the application registry and the **Client ID**, **Client Secret**, and **Token URL** provided by your Qualys account.

    5.  Select **Submit**.

        ServiceNow automatically creates an OAuth Entity Profile that you need for configuring REST messages.

3.  Configure the REST message to use OAuth.

    1.  Navigate to **All** > **System Web Services** > **Outbound** > **REST Message**.

    2.  Select and open the Qualys REST message you want to configure.

    3.  Set **Authentication type** to **OAuth 2.0**.

    4.  Set **OAuth profile** to the profile you created.

    5.  Save the record.

    6.  Select **Get OAuth Token** to request an access token from your OAuth provider.


## What to do next

Repeat step 3 for each Qualys REST message that should use OAuth authentication.