[Music] so [Music] hi everyone welcome to live coding happy hour it's march 18 2022 and you're on this you're watching the show where we drink and be merry and try to do service now stuff that's basically the name of the game you can be merry i'll be chuck okay sure just don't call me shirley all right so uh we're gonna start with introductions uh we'll start with chuck hey there's only two of us that makes it easy today no i'm used to the triangle of us but or four or six or whatever there was last week i think our record was eight i think i recorded so far and once again thank you last week for the ladies of lady coding happy hour that was a lot of fun did a great job it was it was fun being in the peanut gallery [Laughter] my name is chuck tomasi we were doing intros right my name is chuck tamazi senior developer advocate at servicenow been here for well we'll just say since mid 2010 you can do the math yourself and was a customer for a couple of years before that with an extensive history in software development project management itsm you name it there's a lot of nerdy geeky stuff going on in there back into the early 80s and hi everybody i am not senior uh developer advocate at servicenow i've been on the platform for about five years now uh before joining servicenow six months ago i was in higher education and i guess i should reintroduce myself as because i like this shirley duques oh that was a good one chris i liked that actually a lot uh i need my sad trombone for that one i gotta practice my dad jokes my my baby's starting to understand it so i gotta start practicing more uh and then now we introduce our drinks because that's what we like to do on our friday episodes to close out our week yeah we're gonna need it too because uh chrome and streamyard were getting along with each other today i have another one of the six-pack that mark's got brought over of kilt lifter it's slowly disappearing i think there's one left after this maybe two left so this is a scottish style amber ale multi toasted love i don't know how they got the love in the bottle but i'm going to find out do you want to know how they got this i'm just kidding uh i have to drive them right after this episode ends so i'm drinking just a cowboy cream soda from jackson hole soda uh i love cream soda anybody any kind of cream soda i'll just be drinking it by the drugs that's really good over ice cream too it's a nice alternative to a root beer float as a cream soda float that sounds good i bought extra of these maybe i'll do that tonight yep what are we building today chuck we are going to as the name implies we're going to be putting the facebook button on our instance login so that we can use facebook credentials now why you say would you let facebook users into your system and a great use case for this would be like a government agency if you're the state of you know insert your state here and you want people to authenticate with facebook rather than going through a process of creating their own user identification username choose a password validate the password all of that can be bypassed and you can let your users in a lot faster now we're going to be using open id connect which is a standard it's been around for a while it's sort of built on top of oauth 2.0 don't get frightened and run away and start drinking now because servicenow kind of smooths all of that out it's it's even easier to implement than oauth you'll see some similarities when you see like client ids or app ids and secrets and that kind of thing just think of those as like usernames and passwords but we've had openid connect in place since paris so about the last 18 months you could use it with google you could use it with aws you could use it with apple so if you had a developer key and you could go in and get the credentials you could set this up but facebook in their infinite wisdom did things a little differently and it didn't fit the pattern that our developers had put in apparently their oidc is not exactly the same as everyone else's so happy to say that it is it doesn't matter anymore our logic is smart enough to go oh this way that way this is all yeah this is this is facebook and this is everybody else like yes there must be like one big if else in there i don't know what it actually looks like under the hood but that's what we're going to do and it's broken up into two parts we'll start out by creating the credentials the application the security on the facebook side this is very similar to how you would set up any other api or connection is you've got to tell the system you're integrating with let me in this is how i'm going to authenticate that kind of thing and then we're going to come back to the servicenow instance and do this now if you were real observant and you watched the developer blog this morning you may have noticed a new article this is one of the few's live coding happy hours that actually has a companion article to go through it because as i was going through and preparing for this thing can i even do this i don't like to dry run live code too much but this one was too valuable to uh spend the entire hour going uh no still getting a 404 no get a 401 that's better i think if if we're i i wrote down some notes and the notes turned into a more full-fledged blog article so we have a blog article at the link you see there on the screen devlin.sn blog so take a look at that um i do have another short link for it but it's in slack and it's in social media you can find it there the uh oh i forgot to also mention the badge at the top we're still in the san diego season so this is part of the san diego release facebook open id yeah that's nice facebook open id connect is available with the san diego release now there's nothing to stop you from going and getting the credentials and everything and getting ready for that but you can find all of our san diego content again at the link you see here right down there there there devlink dot san diego we're just having a lot of fun with the visual effects today and and we've just started they are the internet explorer of authentication got to be different oh you know twitter's up there too forever to get it oauth 2.0 with their own jwts and everything yeah i'm still working on getting my twitter integration working for integration hub it's supposed to be you know four little strings that you paste in but far be it for me and even worse you get a what is it a two a 200 error message which isn't an error message it's just an http status so it's hard to catch unless you're looking for it specifically like normally 400s and 500s trigger the error handler or a try catch oh no not the twitter failure okay enough about that integration maybe we'll hit that in another episode we are going to start out right here on my uh developer it's actually developers.facebook.com and then there's a slash apps now you can see i've played around in here about 10 years ago i set up a little karate store app on facebook and that was all kinds of fun let's see if my little pointer still works yay i can still oh it's not broadcasting through to stream yard i've got a cursor locator that doesn't show up no well if i'd been sharing my screen it would but i'm sharing a browser tab we had some technical issues beforehand and this is as close as we could get so what i'm going to do is start by saying create app can i zoom oh good i can zoom create app that's where i'm clicking okay that's step one then i'm going to create an app type which is in my case it's consumer you may be business but i can't guarantee that the path will look exactly the same it really doesn't matter all i'm doing is the authentication then i give some basic information um dev 79 000 pdi login wow what a nice round number for your pdi i know i'd really hate to lose this one i had i had an old one it was like two two three three three oh nice now they're six digits we're really cranking them up there okay and that's it i just give it some info there uh obviously i need to authenticate this is pretty standard with getting a consumer key and everything for that right now there's lots of things we could do but obviously we're going to go after facebook login so we set that one up at least my visual effects are working uh not a big guess here which way we're going since servicenow is a web application so we click www and give our site url https dev79k dot service don't forget the dash dot com is just the base i am going to copy and paste that because it's coming up a lot more because we have to give permission to specific domains and callbacks and all that good stuff so once i save that then watch this now you could go through this whole continue continue continue stuff but really it doesn't apply to us it's like set up the facebook sdk for javascript check login status add the facebook login button now we're going to take care of that on our side but we are going to jump over to settings because we were in quick start now we're going to just go for the throat okay this is where it gets kind of fun client oauth login yes web oauth login yes none of these up here really need to be changed but what we do need to pay attention to is the valid oauth redirects and we need two of them in there which seems odd because i've always thought there was just one we'll do this dot nav page dot do tab you see how you can now x out of it and then we're also going to do one that you'll see when we get into servicenow which is fb redirect dot do we apparently have a specific page for redirects nothing else really needs to be changed it's just put those two in save changes and then we get to the fun part should we be worried about that banner at the top no we're getting we might get rid of that i don't know over on settings basic i went to settings advanced once and i had a heart attack display name is what we typed in before so let me know if i need to hide screens at any point um we may we've got we've got an app id and an app secret and i am going to be destroying this as soon as we're done so don't worry about stealing anything but um i will take the app secret so our app domain is going to be just the instance name not the https part the privacy and the privacy policy and the user data deletion they're apparently required but you don't have to actually make them do anything because i don't know where anywhere where it actually asks for them so this is going to be https and watch for errors because this will come back to bite you put this same thing down here if you really have a policy or want to do something like that you can put those in there it doesn't bother me i don't have them i don't care i don't even know where you activate those okay now uh yeah we will need to go privacy for a second here earl while i copy pasta these things out comes our faces okay hi i always have to remember when on my camera i got to sit up so i can be the same height as you i like how there's okay you can put it back i like how there's a show button but it doesn't say hide it says reset so i am going to take that and since i'm only sharing a browser tab i guess i could dump this into vs code that would be handy hey i don't have to worry about shrubbery anymore let me take this other one make sure i get these in the right order okay so that happened now we've got those that's pretty much all we got to do we're really after that app id and app secret and just to make sure that i did save one last time we're done there so i'm going to tell this to stop sharing and share my pdi browser tab now stream yard i'm guessing all the privacy stuff is gdrp gdrp stuff that is necessary now i would guess the same thing too all right go ahead and cheer me up that there we go into my pdi good old dev 79k and uh two things we need to make sure that i i did ahead of time to save us some some time um all let's see system applications all available applications and we all know how long this takes to load hey did i or did i uh we want to go to all we're looking for two plugins that need to be turned on uh i guess i should have loaded this page ahead of time in the meantime are there any sassy comments or anything in the chat that we care about they're mostly talking about time zones being the death of us all uh write your government officials and tell them to turn it off stop doing that i think we got into that last week right and you said oh is it easy no that was that was in ctb tuesday yeah because arizona doesn't bother with it which makes everyone else jealous yeah until you realize what i've got to go through earl is now the same time as me last week he was an hour behind if earl didn't mess with his clock i wouldn't have to care all right we are looking for two plugins one is multiple provider see if i can spell it integration multiple provider this one single sign-on installer good old multi multi-ssl it's it's odd because here it's spelled multiple provider but here it's multiple multi-dash provider so you'll figure it out the other one is approvals with e-signature i don't know why or where this comes in but it's there both of these are free plugins they say free on them so have at it they're both installed i don't even need to upgrade them so that's good but next we need to configure the plugins and i'm going to give you a caveat here the instructions in the docs say go to auto recovery and make sure auto recovery is on if you do this it sets up one account or i guess whatever accounts you want but it starts with one account kind of like a backdoor account to in case sso fails you can still log in with local credentials um but then you have no choice it it's really goofy i just decided to turn it off entirely this is this is you're gonna have to uh you know work with your this is not the account recovery properties that i was looking at i was looking for account recovery properties not auto recovery it's under account recovery properties my documentation might be off actually this one okay enable the account recovery featured and choose the desired settings by enabling local logins local logins will be blocked except for acr users okay that made it a little tough for me to keep doing development on my other instance so let's turn that off again check with your security people how you really want that to go i'm doing this simply for demo purposes and i think i just realized i needed to fix a picture in my article i mean let's be clear let's be very clear if you're integrating facebook as a login you probably should be making sure your security team's um this is another thing i learned is it i talked to our sso developer over in india and he said uh somehow we recognize the difference between facebook and some of the other ones they said facebook is a social account so you really shouldn't have any roles or privileges entitlements on accounts with that ability to log into it oh okay which made it feel like it was really good for you know citizens logging into a you know government portal or something but you don't want to hook up your admin account to do development with this is that because the way that social lets you change your email address at will maybe maybe that's what i'm guessing as opposed to google which is authenticating with a specific account yeah it's like the coalesces brace off of the email address yup so we want to go into uh next is under multi sso administration properties we want to turn on multi-provider sso just make sure all three of these are turned on that's how you get going with this stuff the username field here is how it uh communicates with the with the other side somewhere in that payload it says chuck.gmail.com or whatever and that's how it understands what account it's going to create 99 times out of 100 that's fine leave it alone notice i'm also doing all this stuff in global too this is not uh in a scope of any type it can't be done in a scope anyways right i don't think you can now for the fun part configuring the identity provider this is where things really come together so far this has all been set up now when i turned on the plugin when activated the plugin it created me this oidc facebook account automatically i have tried to use another one but it's kind of a waste of time because there's a lot of stuff pre-built in here just configure this one okay step one is make it active that helps step two put in the right instance in the servicenow home page it comes there it is again automatically do that for you when the plug-in was loaded i can kind of see how it came out that way um step three we want to show as a login option all right and our sso label is what's going to show up on the button it's going to say log in with facebook okay i certainly don't want to say log in with you know zuckerberg's credentials i can put a logo on there so if you think about it it's just a nice little mnemonic uh for the sake of fun i already did that i went to i think i did this let's go check under system ui images oh it opened up a separate browser tab describe it to us it's a list okay it is in there so let me let me just do this i will save here for a moment we'll come back to this all images tv images and like most people i went to images.google.com got a decent looking facebook image and put it in there when you click it it says if you wish to insert it here is there's a there's a sample for you well that popped up in a different browser also uh facebook icon.png which will typically be the same as this there's no slash there's no slash images it will render it the right size so let's go back to history oidc provider i love the history tab the fact that this filter remains and this filter remains and history is right there makes it just a little faster to jump around in the ui i didn't realize the filters remain the same across oh yeah i'm digging this now that's good now we're cooking logo paste there um also i don't know if you noticed there is a slight ui bug we have a lock and an unlock oh okay if you hit one of them it takes care of the other one i have the i have the team checking into that i don't believe that is even a next experience thing i think it's been there a while down on the bottom we want to automatically provision users so when somebody logs in and they don't have an account log them in right and you can see there's there's like all this other stuff that i really wouldn't want to set up from scratch i wouldn't know how to set it up from scratch it's sso it's sso yeah leave it alone they give you a nice annotation to tell you how to do it but really it's it's the fastest way is go update that and then one of my favorites is what role do you want to give people when they log in this could be for a specific application it could be something as generic as public okay you you assign these roles to these peoples when they get provisioned so let's uh are we done we're not done under oidc entity i'm hoping i didn't miss anything we're almost near the end this this might be a short episode uh click into facebook oh i didn't save didn't save you're going too fast chuck you need a drink somewhere okay i can i can live up to that i can verify he actually did that he didn't just make the sound my wife hates that sound the the thirst quencher coca-cola ad sound especially since i got my kids to start doing it really exaggerated they go that's some dad fun you can have there that's some good radio talk too just doing that sound right into the microphone right my client id is my app id this is where you got to kind of translate from facebook speak to servicenow speak the client secret is the yeah i just pasted it in there great that's one that's two so client id client secret and look over here there's that redirect url again now again from the demo data we gotta make it our own and this is the fb redirect that we typed in earlier so there's our redirect url so this was also automatically created for you this uh it was it was in the demo data but i just need to yeah this this oidc entity see it is usually on usually on these records um those things get auto-generated when you save the record yes or if it creates it from scratch but again this came along from the um from the plug-in thank you um we have our good old traditional oauth entity profiles there's really nothing to configure down here but sometimes it's just fun to see what we're doing open id and email is default it's an authorization code oauth provider will take us back to the parent record that's nice everyone's always everyone has struggled with profile scopes and oh good lord yes so that's nice that's why that i swear that was the the catalyst for doing that whole integration series i said i need a diagram of oauth nobody's ever given me one so i'm going to reverse engineer this thing and figure it all out for myself part of the problem with oauth is i'll tell you since we've got a minute for a side track when you go to the application registry it says application registries here but then when you drill in it suddenly changes to oauth oidc entity because it's a it's a like a parent child base class child class thing if you go to say um azure ad now that's an oidc thing too i guess it will say right here but if you go to this one it says oauth client yeah mobile app you know so there's different classes of these tables underneath which gets a little confusing so application registry is a base class and then these other ones are underneath it kind of like the other giveaways if you press new right now it'll tell you there's a bunch of classes an interceptor we don't talk about interceptors too much they are really handy this one is a big one and i think uh cmdb has a big one cnbb has a big one that one wasn't big you're thinking about credentials credentials also has one though yeah credentials and it seems to change on every release credentials has lots of different types of yeah you put in there um all right now we're just having an abstraction if task.list if you do a new on that one it will give you one come on i hit enter does it because you can make tasks directly to the table too no you can't this is an interceptor oh all right i mean if you do task.do you can yeah yeah so yeah that's a nice list okay interceptors if you haven't looked at them we've done videos on that before too uh where were we oh i think we're ready to to test the the credentials all done the credential is all done i don't i mean the registry the application registry i i didn't need to touch the registry multi identity provider i'm just going to go back and check one more time oidc facebook yes yes uh i haven't figured out what default does i'm not going to make this a default here today uh is there an ordering or anything no so let's go and um log out log out if anything all this setup shows that hey anybody looking at this video maybe there you go demo data oh hey let's log in with facebook now i am going to i have a chuck dot tomasi this should take me to facebook uh don't worry about that submit for login review oh you know what i didn't do i didn't put this in production i don't know if it'll work i forgot to flip the production switch this may fail good because it wouldn't be live coding happy hour if we didn't have some kind of error oh it took me right in how did he know who i was i'm me but i'm not my this isn't my admin account i i must have authenticated here at some point because it should have said hey now give me your facebook password and then do you accept so this is clearly down you know no i've got i've got public access so i'm not going to have a whole lot none of my favorites are there obviously none of my history is there but i'm in and let's go and log out of this one this video makes it look even easier than it than actually that's why we're doing this earl [Laughter] i like the new uh next experience log out page rather than that old standard one that just had some text in the upper corner yeah uh-oh hey apparently i didn't log out log out having flashbacks this happened so many times you have successfully logged out but if i go to nav page dot do it takes me right back in oh somewhere there's a session token or something going on here external logout complete you know what um i wonder if the facebook it's auto validating right when you go into it so it's logging you in every time dot do i can go to login.due go in with my traditional account and what i should see there we go there we go user administration users i should see a new account created today there's chuck.tamassie gmail.com and look over here it's got this sso source field oh is that the identity provider that is the sys id of the identity provider so here's the important part now that i've created an account with facebook let's say i go and implement google i can't log in that way it's not going to work would it it will deny you or will it create another account no it'll deny me it's going to go this this is not for you the other thing to note is there's my public role that i said hey provision new people with this so kind of cool that it worked out this way the show xml just for the fun of it let's go poking around in here we've got there's our sso source again you see that and i know i know this is right because i remember the dddd5 that's right out of the plug-in data what was the other one that i was looking for oh we can't see the xml by the way ah darn it can you copy-paste some of the key things you're looking at i could possibly put some of the let's see oh here we see dddd5 over here oh okay yeah all right so that's that's the society of the i got to figure out what happened to streamyard today it's going to bother me all weekend well you have to figure it out by tomorrow i have to figure it out by tomorrow yep i might just reboot everything i don't know or log out i'm wondering if it's be no because on one of them i was logged in as servicenow dev and on the other one i'm logged in as chuck tomasi but anyway so we can provision think about this that's the other um let's go ahead and log out this one and what i want to know is if we go into service portal i did a slash sp look at that i didn't even already do anything automatically automatically there and so think about if you were a government agency and you had that on your portal that's pretty darn cool and let's make sure this is me and not the administration me yep that's me so chuck if you log out and then try to go back just the the dome this regular domain again i'm gonna i'm gonna guess that facebook token is gonna auto lock you back in i'm guessing it will too yeah i could see the url going hey let's do a redirect yeah so it does that um benefit for uh the user so that hey we know you already authenticated facebook so we're going to log you in directly so i'm forcing it on the url by going to slashlogin.due so if you if you think you're not actually getting logged out you are getting logged out it's just that your your facebook integration is still live so it's like hey we know who you are and they're going to log you directly instead of going to a login screen it's not an error working as intended so let me let me show that other tab real quick there was one more thing that i needed to demonstrate and i that i said i forgot to do so share screen chrome tab let's go back to facebook's credential thing up at the top it says app mode apparently this doesn't mean anything except your app can only request data from users with an app role to request end user data you must have advanced access permissions and be set to live mode so you got to do this okay it's now ah get out of the way i mean it still worked even in death mode yes it did but i'm wondering if that was just because i'm me or uh if we saw that credential message that said hey you're not really oh you're right because it said it just said when you hovered over it said it's only it only worked for people that have credentials for this app and i think that was in the you saw something in here too that said um by the way let's see where was it the settings basic there was a header up here at one point remember you saw it on this side yeah yeah you're right there was like an error and an informational banner yep and now it's gone i'm not sure how you tell servicenow to forget and re-authenticate though that kind of bothers me maybe we should hack around and find that you might would you be maybe what would happen if you clear out the ss the sso the sso uh um source yeah oh that's a really good question a dangerous one but a good one hey it's not my account i mean i can still log in without it so it's just a text field feels like it should be a reference field okay let's cut that and paste that into vs code and then log out maybe it's not a reference field because it knows it could be coming in as demo data or from other sources oh it just jumped me to the the failed screen it did not like that okay well hang on we're not let's go find out what happened this is this is how i was debugging earlier too uh because sometimes like if you've already created an account with google facebook's going to come along and go i can't create an account with that you've already got a unique key called chuck.tamassiegmail.com yeah that was my tuesday night at about 10 p.m with the guy in india i learned a lot that way is would be to delete the whole record that's why we share here so let's go to system logs all and we should see um error accessing method failed user's sso field is empty ensure that the user you're trying to log into is from the correct source as mentioned in the user's sso source field no thrown error says the throne error [Laughter] that's actually kind of funny that's interesting because let me show you something else from one of my favorite instances i'm going to share a new tab here in a second but i got to get logged in i already finished my drink tastes so good wow you're really bored i just it's gone sure uh this is from our old friend karaoke.servicenow.com watch this though up until about three days ago i didn't have facebook login on here i only had google now i've got both and if i go to user administration users oh somebody logged in with facebook there's ddd5 but look at all these other ones if i look for something.gmail.com the majority of them are blank yet they logged in with google as their sso but apparently now and it still works now that it's san diego it's starting to fill in the google odp so if you sort it by date these are this is when it was updated that doesn't quite make sense you created the fact that i have updated and created tells you i am way too into this data yeah it looks like more of the more recently created from scratch i would agree with that assessment um wait a minute but 12 14 12 okay danny mortensen was on again um i didn't turn on i mean this thing was only updated to san diego like a week or two ago it wasn't that and we're back into december when these were created so sometimes it cares and sometimes it doesn't i don't know i don't know so you guys so google's uh uh authentication knows whether it has sso id or not maybe let's go take a look since we're here or is danny mortison and all of them getting errors yeah we don't know they don't come back i don't have a lot of repeat customers in this application apparently let's go to um the identity providers over here and here's my google one looks very similar google there's the logo actually i use the full url in this one for whatever reason i don't know why i provision them with a specific role the oidc entity a lot of this looks exactly the same from this side as it did from facebook so there's really no no major difference of configuring facebook versus configuring google i still need a client id i still need a client secret all the change is on the other end it's like where do i get these things yeah so this is this is really handy um the i thought there was a script difference though hold on oidc facebook facebook has a there's the out there's the redirect user provisioning provision data source facebook i hadn't been down this road but i didn't know about that sso source but then again i haven't done sso in a long long time and it's probably changed that sso source may not have been around in 2011. the interesting stuff so yeah have some fun poking around with that i'm not done yet no he says chuck says i'm not done yet my my beer is only half gone uh earlier someone asked um they we talked about at the beginning of the episode about oh what would be the benefit of adding facebook authentication and i i answered in chat uh for example if you have a pub-facing app or something like the karaoke app and you need people to participate but they need to create accounts to do a sign up or anything like that um a lot of people have facebook so it's an easy way to allow them to um or better yet if you have multiple ways for people to sign up and they can use whichever one they prefer um the other option obviously is uh and you can clearly do this in case people go i don't trust google i don't trust facebook i'd i'm going to do it myself uh we have an external user provisioning available let me go back to i don't know one of these browsers yeah can you show us what it looks like when you have multiple ones too like on your karaoke app if it's because you have facebook and google right i certainly can share me up there batman there we go let me log out wow log out i already got used to the new ui uh if we look at it from the way a user would come in they'd come into this service portal devlink.sn slash karaoke this is the way that multiples look cool what most people should be used to seeing when they're signing up for new sites and stuff very familiar the other way is we do have an external user provisioning process um i wrote my original one because it came along about six months after i created mine like many things we write by ourselves right it was added to the product in orlando i want to say uh might have been paris and then i went oh i will never write my own user provisioning again this takes care of everything you've got you can define what fields you want on the form obviously my theme is kind of jacking with some of the widgets over here right but uh first name last name and then when they submit this i even added a region because if you're playing along with karaoke you um you don't want to be picking videos that aren't available in your region so it has to imagine it just adds it to a filter so that's a very specialized field for my portal for my application you can put in captcha you can put in um several other things it's really easy to configure how this behaves and it does the email authentication for you so when i fill this out it creates the account it creates a temp password and everything right yes it's like a registration request it's an account request and then you get an email it says please validate this was you because you put your email right in this you know email field right there then you click it then you do the password setting piece and it it to try and do that yourself is just a freaking nightmare yeah i had in fact i think i still have a table on mine let me see this is the typical google login pretty painless we're going to get out of this and go now ordinary users can't do this but since i'm not an ordinary user my account says i'm allowed to do this i made sure that i tried to keep him in the box as much as possible i have a table under administration it's probably still under here yeah password keys so when i do a password reset it's still in there so i know who who requested a password let's see has anybody reset their password recently oh well blair did blair was on the cruise when she created this account i almost got booed off stage at karaoke on our cruise because i threw in a commercial for this app oh well i never yeah anthony montgomery was not happy about that but uh afterwards blair said hey do you still have that url and i said yes yes i do so she's from the uk i don't think she watches this show though so what anything else we need to poke around with or are we going to cut this one 10 minutes short well we i feel like we poked around a good amount of like learned a lot about sso things that you will learn a lot by bumping your head but hopefully i've shown you a path to bump less and again there is a blog article devlin.sn sd dash fb san diego facebook dash oidc open id connect again you can find it directly through the sn devlin.sn slash blog so check that out makes it real easy um i guess i could share that one right devlink dot sn blog it was published today on march 18th i will share that tab as well so share screen you can see what it looks like for your very own eyes servicenow developer blog there we go configuring facebook open id connect pretty much exactly what i went through and i will replace that one incorrect screen it's about down here it says there it is it says go to auto recovery properties but this is actually the account recovery properties i did that wrong so this pic this gray picture needs fixing ah they watch the episode they'll know what it is [Laughter] yeah i just told them how they're gonna bump their knees and elbows less and then i throw in one very nice so i know that was a little less hacky than our usual live codes but this one had the potential to go off the rails so many times it was very it was a little creator toolboxy but it's okay it's friday we're still celebrating the end of the week yes we are happy friday everybody unless you're watching in you know sydney saturday we haven't seen upside down andrew in a while uh we are working on plans for creatorcon we've had a number of good weeks this uh good good meetings this week brainstorming sessions uh if you haven't heard creatorcon is going to be in person so we will be at four locations uh we we're still working on the content for a landing page otherwise we'd throw a link up there for you right now but you are able to register for knowledge creatorcon is the developer event inside of knowledge so pretty much everybody is watching this think creatorcon it's it's parent is knowledge okay so it's a child event inside the parent event well now we're getting into hierarchical events the uh there's also a digital experience yes there is a digital experience in case you're not available to go we are we are not doing one big event in vegas or orlando it's going to be four smaller events so may correct me on the dates here 11 12 is um new york and the hague so over in the netherlands so we're doing emea and ams two weeks later which would be the 25th 26th of may will be las vegas and sydney now you can kind of get the idea that some of these things are happening at the same time so uh we had to divvy up our crew and at this point i will be going to new york and sydney you will see brad and earl in vegas and the hague is what the schedule is right now again there's still about six weeks seven weeks left to go lots of digital content left to record lots of live content to figure out there's uh going to be a creator con space so if you can make it to one of these live events we're going to have a hack zone and we're going to have a little lounge theater area where we'll be doing live presentations and speaker breakouts and lots of hands-on labs so all the goodness you've come to know if you've been at a previous live knowledge which was last done three years ago oh it hurts to say that but man it's going to be sweet to get back and see some of these people we haven't seen in years and if this is your first knowledge as is the case with my son-in-law you're in for something special these will be smaller venues though it's not going to be 20 000 people in each one of these so it could be 2 500 it could be 5 000 so it's going to be a little more intimate so we call it for that intimate intimate uh come join us for live shows you can yell at us in person instead of in the chat room yes hey click on this what happens if you go there chuck you typed something out you forgot you forgot to slash on your url because that always keep forgetting to save [Laughter] a lot of fun coming up i'm really looking forward to it but it's it's scary that it's so close and we still have so much work left to do welcome to creatorcon every year as we're we're still we're still uh putting out the san diego content we're working on creatorcon uh there's still the regular machine that needs to be fed like breakpoints not going away it still has to be you know the podcast coming out um next week's break point is going to be with julia perlis on decision builder we're also doing a decision builder that's right julia's will be hosted on friday on friday she's going to be joining us for live code on friday uh what do we get on creator toolbox on tuesday i don't know i know devlin.sn slash blog san diego order guide sequencing gabby is asking if we're going to be doing a live break point that would be interesting we'd have to stream the audio and potentially the video as well for an interview um don't know about that but i may bring a portable recording rig so we could do on the spot interviews or um you know maybe some drop-ins for the show don't know i i i get creative when i when i have a microphone in my hand so we shall see um i'm also jotting down everything that i'm supposed to be doing because i keep volunteering to do more yeah you do we gabby was on the open office hours if you are a speaker be sure to join those open office hours that we have time blocks for jason and i and earl and brad are on there to help shape your message your presentation even tweak the abstract if it still needs it but i think those have been locked down so please take advantage of the time you've got with us if you're doing that it's it's very helpful in fact we came up with a potential new idea for the developer lounge people were telling war stories yesterday about things that you know went horribly wrong and what they learned and and how they're going to avoid them in the past and it's called experience people and we may or may not be having a session where we're sharing those stories so it could be just live and go hey gabby get up here tell me that story you told me on the open office hours and because people were reacting just on this zoom with about six people are going ooh that hurts yeah uh yeah it was a great time yeah i think that oh we gotta rate our drinks we have to rate our drink we almost left without the most important part of the show my kilt lifter it's it's a kilt lifter i've probably had too many of these so i'm reading a little lower it doesn't have that same crisp refreshingness but hey if you're into these you know scottish style amber ales you're gonna love it um i'm going to give it a you know 375. let's give it a 4 for the success factor today so it was nice it was refreshing it was it was very uh it wasn't hoppy it's not an ipa kind of ale but um it didn't have it's got its own character i'll say all right uh i have a cowboy cream soda since i have to drive right now um it's actually one of the better cream sodas i've had i'll give it a 4 with the success also and i think that wraps it up for us um again we had a lot of announcements at the end of this one check them out on the blog mostly and you'll be hearing about creatorcon and knowledge stuff organically if you're plugged into the community from many different directions i'm sorry sure uh anyways thanks everybody have a great week everybody bye bye [Music] my [Music] you