--- title: Set up the Google Cloud Translator Service spoke description: Integrate your Google account with your ServiceNow instance.Encrypt the security certificates obtained from Google by creating a Java KeyStore \(JKS\) file.Enable the JWT client authentication by attaching a valid Java KeyStore \(JKS\) certificate to Google Cloud Translator Service spoke.Assign a JSON Web Token \(JWT\) signing key to your Java KeyStore certificate.Add a JSON Web Token \(JWT\) provider to Google Cloud Translator Service spoke.Authorize actions of Google Cloud Translator Service spoke by configuring the Google OAuth 2.0 credential.Connect to the Google's translation service by configuring the Google connection. Provide information that is used by HTTP\(s\) actions or activities to connect to that service. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/integrate-applications/integration-hub/setup-google-translator.html release: australia product: Integration Hub classification: integration-hub topic_type: task last_updated: "2026-03-12" reading_time_minutes: 5 breadcrumb: [Google Cloud Translator Service Spoke, Integration Hub spokes, Build integrations, Integration Hub, Workflow Data Fabric] --- # Set up the Google Cloud Translator Service spoke Integrate your Google account with your ServiceNow instance. ## Before you begin - Request an Integration Hub subscription. - Activate the Google Cloud Translator Service spoke. - Create a service account on Google Cloud, generate a service account key of JSON type and download it. For information on creating the service account key, see the [Google](https://cloud.google.com/docs/authentication/getting-started#creating_a_service_account) documentation. - Enable the Cloud Translation API service. For information on enabling a service, see the [Google](https://cloud.google.com/service-usage/docs/enable-disable#enabling) documentation. - Role required: admin ## Create a Java KeyStore certificate Encrypt the security certificates obtained from Google by creating a Java KeyStore \(JKS\) file. ### Before you begin - Role required: admin - Download a JSON file containing the service account key from Google. For information on downloading the JSON file, see the [Google](https://cloud.google.com/docs/authentication/getting-started#creating_a_service_account) documentation. Following is a sample JSON file: ``` { "type": "service_account", "project_id": "primeval-nectar-242610", "private_key_id": "0c6c7b1511f1c236c1300c5933d528bbf45314e5", "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n", "client_email": "service-now-google-trans-v3@primeval-nectar-242610.iam.gserviceaccount.com", "client_id": "113255944370425109391", "auth_uri": "https://accounts.google.com/o/oauth2/auth", "token_uri": "https://oauth2.googleapis.com/token", "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs", "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-now-google-trans-v3%40primeval-nectar-242610.iam.gserviceaccount.com" } ``` ### Procedure 1. In the JSON file, perform the following for the `private_key` value. 1. Unescape the `\n` characters. **Tip:** To unescape characters in a JSON file, you can parse a JSON string into a JavaScript object. 2. Store the private key in a file with .pem extension. 2. In the JSON file, perform the following for the `client_x509_cert_url` value. 1. Open the link specified for `client_x509_cert_url`. 2. Unescape the `\n` characters for the certificate associated with the private\_key\_id mentioned in the JSON file. 3. Store the certificate value in a file with .pem extension. 3. Use the openssl command to create a PKCS 12 file using the recently created private key and certificate files. ``` openssl pkcs12 -export -in [path to certificate] -inkey [path to private key] -certfile [path to certificate ] -out testkeystore.p12 ``` For example, if certificate.pem is the certficate and privatekey.pem is the private key: ``` openssl pkcs12 -export -in certificate.pem -inkey privatekey.pem -certfile certificate.pem -out testkeystore.p12 ``` A PKCS 12 file, testkeystore.p12, is created. 4. Specify an export password or source keystore password. **Note:** You should specify this password when creating a JWT key for Google Cloud Translator Service spoke. 5. Use the keytool command to create a JKS file from the PKCS 12 file. ``` keytool -importkeystore -srckeystore testkeystore.p12 -srcstoretype pkcs12 -destkeystore wso2carbon.jks -deststoretype JKS ``` **Note:** testKeyStore.p12 is the PKCS 12 file and wso2carbon.jks is the JKS file. 6. Specify a destination keystore password. **Note:** You should specify this password when attaching a JKS certificate to Google Cloud Translator Service spoke. ## Attach a Java KeyStore certificate to Google Cloud Translator Service spoke Enable the JWT client authentication by attaching a valid Java KeyStore \(JKS\) certificate to Google Cloud Translator Service spoke. ### Before you begin - Role required: admin - Valid Java KeyStore certificate ### Procedure 1. Navigate to **All** > **System Definition** > **Certificates**. 2. Click **New**. 3. On the form, fill in the fields. |Field|Description| |-----|-----------| |Name|Identifier of the certificate.| |Notify on expiration|Users to be notified when the certificate expires.| |Warn in days to expire|Number of days to send a notification before the certificate expires.| |Active|Option to activate the certificate.| |Type|Type of the certificate. Select **Java Key Store**.| |Expires in days|Number of days until the certificate expires.| |Key store password|Password to access the certificate. Use the destination keystore password specified when creating the JKS certificate. For more information on this password, see [Create a Java KeyStore certificate](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/integrate-applications/integration-hub/setup-google-translator.md).| |Short description|Summary about the certificate.| 4. Click the manage attachments icon \(\[Omitted image "attachments-icon.png"\] Alt text: Attachments icon\) and attach a JKS certificate. 5. To validate the JKS certificate, click **Validate Stores/Certificates**. 6. Click **Submit**. ## Create a JWT signing key for Google Cloud Translator Service spoke Assign a JSON Web Token \(JWT\) signing key to your Java KeyStore certificate. ### Before you begin Role required: admin ### Procedure 1. Navigate to **All** > **System OAuth** > **JWT Keys**. 2. Click **New**. 3. On the form, fill in the fields. |Field|Description| |-----|-----------| |Name|Identifier of the JWT signing key.| |Signing Keystore|Valid JKS certificate for which you want to assign the key.| |Key Id|Key ID to identify which key is used when multiple keys are used to sign tokens.| |Signing Algorithm|Algorithm to sign with the key.| |Signing Key Password|Password associated with the key. Use the export password or the source keystore password specified when creating the JKS certificate. For more information on this password, see [Create a Java KeyStore certificate](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/integrate-applications/integration-hub/setup-google-translator.md).| |Active|Option to activate the key.| 4. Click **Submit**. ## Create a JWT provider for Google Cloud Translator Service spoke Add a JSON Web Token \(JWT\) provider to Google Cloud Translator Service spoke. ### Before you begin Role required: admin ### Procedure 1. Navigate to **All** > **System OAuth** > **JWT Providers**. 2. Click **New**. 3. On the form, fill in the fields. |Field|Description| |-----|-----------| |Name|Identifier of the JWT provider.| |Expiry Interval \(sec\)|Number of seconds that indicate the lifespan of the JWT provider token. Specify `3600`.| |Signing Configuration|JWT signing key.| 4. Right-click the form header, and click **Save**. 5. In the Standard Claims related list, enter the values for these claims. |Claim name|Claim value| |----------|-----------| |aud|https://www.googleapis.com/oauth2/v4/token| |iss|**client\_email** value from the JSON file.| 6. In the Custom Claims related list, create the **scope** claim and enter its value as `https://www.googleapis.com/auth/cloud-translation`. 7. Click **Update**. ## Configure the credential for the GoogleTranslation alias Authorize actions of Google Cloud Translator Service spoke by configuring the Google OAuth 2.0 credential. ### Before you begin Role required: admin ### Procedure 1. Navigate to **All** > **Connections & Credentials** > **Credentials**. 2. Select the Google OAuth 2.0 credential. 3. Open the record specified in the **OAuth Entity Profile** field. 4. In the **JWT Provider** field, specify the JWT provider that you want to use. 5. Click **Update**. 6. To verify if an OAuth Access token is generated to connect to Google's translation services, click the **Get OAuth Token** related link of the Google OAuth 2.0 credential. ## Configure the connection attributes for the GoogleTranslation alias Connect to the Google's translation service by configuring the Google connection. Provide information that is used by HTTP\(s\) actions or activities to connect to that service. ### Before you begin Role required: connection\_admin ### Procedure 1. Navigate to **All** > **Connections & Credentials** > **Connections**. 2. Open for the record for **Google**. 3. In the Attributes related list of the HTTP\(S\) Connection form, fill in the fields.
Field Value required
location Location of the customer. If the value is not specified when creating an account on Google Cloud, then specify `global`.
project\_id Identifier of a project. Specify the **project\_id** value from the JSON file.
version API version that the related spokes are built for. The default value is `v3beta1`.Because Google now supports the v3 version, you can override this value as `v3`.
4. Right-click the form header and click **Save**.