---
title: Configure Connection and Credential aliases for the Common Security Advisory Framework \(CSAF\)
description: Configure Connection and Credential aliases to authenticate vendors. In advisory parsing, third-party vendors are authenticated.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/configure-connection-credential-aliases-csaf.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Common Security Advisory Framework \(CSAF\), Configure vulnerability solution providers, Setting up vulnerability solution providers, Configuring Vulnerability Response using the Setup Assistant, Vulnerability Response implementation, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Configure Connection and Credential aliases for the Common Security Advisory Framework \(CSAF\)

Configure Connection and Credential aliases to authenticate vendors. In advisory parsing, third-party vendors are authenticated.

## Before you begin

Role required: sn\_vul.vulnerability\_admin, sn\_vul.admin \(deprecated\), or admin

## Procedure

1.  Create OAuth authentication.

    See [Create an endpoint for clients to access the instance](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/t_CreateEndpointforExternalClients.md).

2.  Create a Connection and Credential alias.

    See [Create a Connection and Credential alias](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/connection-alias.md).

3.  Create a Connection.

    1.  Select the name of the newly created Connection and Credential Alias.

    2.  Under the **Connections** tab, select **New**.

    3.  If the authentication type is OAuth, select the Application Registry Profile created in step 1 as **OAuth Entity Profile**.

    4.  Create a record in Connections from the related list of the record.

    5.  In the **Credential** field, select the credential record created in step 3d.

    6.  In the **Connection URL** field, enter the URL of the vendor.

    7.  Select **Submit**.