SN System Properties Reference
Category · 247 properties

ServiceNow Authentication & SSO properties

These properties control aspects of authentication and single sign-on, including login behavior, password resets, OAuth, and identity features. Admins and developers can consult them when configuring sign-in flows, investigating authentication issues, or reviewing related behavior, such as settings named glide.authenticate or password_reset.

Most common namespaces: glide.authenticate 96 password_reset 24 glide.oauth 21 glide (other) 19 com.glide 12 com.snc 12

com.glide.auth.profile.supported.processor.list It defines a comma-separated list of Java processors that can be used for API authentication, impacting how authentication requests are processed.
com.glide.communications.oauth.token.generation.usage.collection It configures whether usage metrics for OAuth Token Generation are collected, impacting how token generation activities are monitored.
com.glide.communications.personal.auth.license.enabled This property determines the activation status of the personal authentication feature based on customer type and plugin availability.
com.glide.communications.personal.auth.usage.collection It allows administrators to enable or disable the collection of usage metrics specifically for Personal Auth Outbound requests.
com.glide.cs.fdih.password.password_error This property sets the error message shown to users when the system cannot accept a password confirmation after the specified retry limit is reached.
com.glide.cs.locked_out_error_message It specifies the error message displayed to requesters when their accounts are locked due to security policies.
com.glide.cs.web_client_login_redirect_urls This property specifies a comma-separated list of allowed URLs for redirection during the web client login process, preventing unauthorized redirects.
com.glide.identity.globalid.feature.enabled This property activates the global ID feature, which facilitates consistent user identity management across the ServiceNow platform.
com.glide.identitycenter.api.loginhistory.enable This property controls the activation of the login history feature, allowing administrators to monitor user login activities.
com.glide.oauth.client_secret.auto_generate_length This property defines the character length for client secrets generated by the system, impacting the security of OAuth integrations.
com.glide.rest.api.auth.scope.check.enable This property disables the authentication scope check for REST APIs, allowing requests to proceed without validation of the auth scope.
com.glide.security.oauth.jwt_signing_module_sys_id It defines the cryptographic module for JWT signing, defaulting to the out-of-the-box module.
com.snc.integration.saml_esig.approval_consumer_url It specifies the URL that the SAML authentication process uses to receive assertions for eSignature, allowing for customization if needed.
com.snc.integration.saml_esig.assertion_consumer_service_index It determines which AssertionConsumerURL to use for eSignature authentication based on the specified index.
com.snc.integration.saml_esig.idp_authnrequest_url This property sets the AuthnRequest URL for eSignature Authentication, allowing integration with a specific SAML 2.0 Identity Provider.
com.snc.integration.saml_esig.popup_dlg_width It configures the width of the authentication pop-up dialog that prompts users for credentials during eSignature approvals.
com.snc.integration.scim2.user.email.field.unique.validation.enabled It enforces that each user email address must be unique within the system, preventing duplicates.
com.snc.platform.security.oauth.certificate.url This property defines the URL where the OAuth certificate is stored, which is essential for secure OAuth authentication processes.
com.snc.platform.security.oauth.client.id This property sets a unique, cryptographically secure client ID for OAuth, essential for identifying the ServiceNow instance during authentication processes.
com.snc.platform.security.oauth.crypto.salt This property specifies the cryptographic salt utilized in OAuth processes to enhance security.
com.snc.platform.security.oauth.hours.expired.credential.is.kept It specifies the minimum number of hours that expired oauth_credential records are kept in the system.
com.snc.platform.security.oauth.is.active This property activates OAuth functionality, allowing the instance to engage in OAuth-based authentication and authorization flows.
com.snc.platform.security.oauth.mcp.aig_scope_support This property controls the caching behavior of OAuth access tokens based on requested and configured scopes, impacting how tokens are reused for different requests.
com.snc.platform.security.oauth.private.key.url This property defines the URL where the instance's OAuth private key is stored, impacting OAuth authentication security.
glide.amb.themed_login This property configures the appearance and behavior of the amb client login modal, allowing it to either match the page theme or display in an iframe.
glide.apply.password_policy.on_login This property enforces password policy checks on user passwords at the time of login, ensuring compliance with security standards.
glide.auth.mfa.ui.v2.enabled This property activates a user-friendly interface for setting up multi-factor authentication options separately.
glide.auth.policy.ui.error.message This property specifies the error message displayed during login failures caused by authentication policy violations, helping users understand the reason for their unsuccessful login attempts.
glide.auth_factors.kba.enable_user_column This property enforces the requirement for a user column when creating or updating knowledge-based answers, ensuring uniformity in authentication practices.
glide.auth_factors.kba.session_context.enabled This property enables or disables the propagation of the kba_session_context map to scripts, influencing how authentication context is handled.
glide.auth_factors.softpin.enrollment.enabled This property controls the display of the Soft PIN enrollment option, affecting user access to enroll in Soft PIN authentication.
glide.authenticate.api.user.reset_password.mandatory This property enforces mandatory password resets for API users, enhancing security by ensuring that users regularly update their credentials.
glide.authenticate.auth.policy.enabled This property determines whether the Authentication Policy feature is active, impacting how user authentication is managed within the system.
glide.authenticate.basic_auth.allow_snc_external This property determines whether users with the snc_external role can bypass basic authentication restrictions, impacting their access to the system.
glide.authenticate.basic_auth.allow_wsao This property allows service accounts designated as web_service_access_only to authenticate when enabled, facilitating secure access for automated processes.
glide.authenticate.basic_auth.allowed_roles This property defines a comma-separated list of roles that can authenticate via basic auth without multi-factor authentication, impacting security protocols.
glide.authenticate.basic_auth.allowed_users This property contains a comma-separated list of user sys_ids that are allowed to bypass the Basic Authentication Restriction gate, enabling them to authenticate without multi-factor authentication.
glide.authenticate.basic_auth.restriction.active This property determines whether the platform evaluates inbound basic-auth API requests against allowed access paths, impacting security enforcement.
glide.authenticate.basic_auth.restriction.default_decision This property defines the default decision for basic-auth accounts, allowing for either unrestricted access or imposing restrictions based on the specified choice.
glide.authenticate.basic_auth.restriction.enforce This property enables or disables the enforcement of Basic Authentication restrictions, blocking requests from non-allow-listed accounts when active.
glide.authenticate.basic_auth.restriction.enforcement_date This property sets the date and time when basic authentication restrictions take effect, blocking access for users without the appropriate role after this point.
glide.authenticate.cert.redirect.enable This property configures the system to automatically redirect users to the appropriate login page when they attempt to authenticate using a certificate.
glide.authenticate.cert.ui.login.enabled This property controls the visibility of the PIV/CAC login option on the ServiceNow login page, enhancing authentication options for users.
glide.authenticate.debug.allow.trusted.device This property activates debug logging specifically for the Device Trust Flow, providing detailed logs that can assist in diagnosing authentication problems.
glide.authenticate.enable.time_limited_authentication It activates a feature that limits the validity of authentication links, ensuring they can only be used a specified number of times.
glide.authenticate.external This property configures the system to allow users to authenticate through external sources, improving flexibility in user access management.
glide.authenticate.external.logout_redirect It defines the redirect URL for users after they log out, ensuring they return to the appropriate portal or application.
glide.authenticate.failed_missing_requirement It specifies a URL that is used in conjunction with SSO to redirect users when authentication fails due to unmet requirements.
glide.authenticate.failed_redirect It configures the redirect URL for users encountering a failed SSO attempt, allowing for customized error handling and support.
glide.authenticate.failed_requirement_redirect This property sets the redirection URL for users lacking SSO credentials when accessing restricted pages.
glide.authenticate.header.encrypted_key This property defines the HTTP header name that the system checks for externally authorized users, impacting authentication processes.
glide.authenticate.header.key It configures the specific HTTP header that ServiceNow checks for externally authorized user information.
glide.authenticate.header.value This property defines the specific field name for matching incoming headers during the authentication process.
glide.authenticate.honor.sso_record.failed_requirement_redirect It configures the system to redirect users based on the SSO record's failed requirement settings, overriding the default redirect behavior.
glide.authenticate.hybrid_user_tracking.enabled This property enables tracking of non-web service user accounts that authenticate via API logins, recording their activity in the User MFA Enforcement Info table.
glide.authenticate.id_token_flow.enabled This boolean property controls the activation of parent SSO (OIDC) login reuse, enhancing user authentication efficiency.
glide.authenticate.jwt.jti_verification.jti.required This property enables or disables the requirement for JWT ID verification, impacting how authentication tokens are validated.
glide.authenticate.limit.concurrent.interactive This property configures the maximum number of interactive sessions that can be active simultaneously, helping to mitigate security risks associated with session hijacking.
glide.authenticate.limit.concurrent.interactive.sessions When enabled, this property limits the number of concurrent interactive sessions a user can have, relying on the glide.authenticate.max.concurrent.interactive.sessions property for the specific limit.
glide.authenticate.limit.concurrent.sessions.across.all.nodes This property ensures that the number of active user sessions is monitored across all nodes, enhancing security by preventing multiple concurrent sessions.
glide.authenticate.login.default_allow This property enables or disables the default execution of the deny access policy, affecting user access based on defined conditions.
glide.authenticate.max.concurrent.interactive.sessions This property defines the maximum number of concurrent interactive sessions allowed for a user, applicable only when the limit concurrent sessions feature is activated.
glide.authenticate.mfa.with.multisso.enabled This property activates Multi-Factor Authentication for users logging in via Single Sign-On, ensuring an extra layer of security during the authentication process.
glide.authenticate.multifactor This property activates multi-factor authentication, requiring users to provide additional verification during the login process.
glide.authenticate.multifactor.browser.fingerprint.validity This property sets the validity period for a browser fingerprint, allowing users to bypass second-factor authentication in the same browser for the specified duration.
glide.authenticate.multifactor.clock_skew This property specifies the additional time allowance for multifactor authentication codes to remain valid, accommodating potential clock skew between systems.
glide.authenticate.multifactor.disable.reason This property allows administrators to document the rationale behind disabling Multi-factor Authentication, providing clarity on security decisions.
glide.authenticate.multifactor.email.otp.enabled This property determines whether email can be used as a method for sending one-time passcodes during multi-factor authentication.
glide.authenticate.multifactor.enforcement.acknowledged This property acknowledges the review of MFA Enforcement changes and suppresses related admin messages when set to true.
glide.authenticate.multifactor.enforcement.max_relaxation_period This property determines the maximum number of days a new user can self-enroll for MFA before being automatically challenged during non-SSO logins.
glide.authenticate.multifactor.enforcement.show_user_info_message It controls the visibility of the MFA Self Enrolment info message for users logging in during their self enrolment period.
glide.authenticate.multifactor.for_integrations This property, when set to true, requires MFA for inbound integration authentication, thereby increasing security for integration points.
glide.authenticate.multifactor.remember.browser.default This property determines whether the 'remember browser' option is checked by default during multi-factor authentication, impacting user convenience and security.
glide.authenticate.multifactor.remember.browser.enable This property enables or disables the remember browser feature for multi-factor authentication, enhancing user convenience during logins.
glide.authenticate.multifactor.remembered.browser.max.count It defines the limit on the number of browsers that can be remembered for MFA, impacting user convenience during login.
glide.authenticate.multifactor.self_enrolment_period This property determines the self-enrollment period for MFA, allowing users to enroll within a specified number of days before being required to use MFA.
glide.authenticate.multifactor.setup.bypass.count It defines the maximum number of bypass attempts a user has before being required to complete multi-factor authentication setup.
glide.authenticate.multisso.enabled This property allows the configuration of multiple SSO providers, enabling users to authenticate using different identity providers.
glide.authenticate.multisso.login_locate.user_field This property determines the user identifier field for the 'User identification' login page, defaulting to 'user_name'.
glide.authenticate.multisso.suppress.ssoid.cookie It disables the creation of the glide_sso_id cookie when the force_sso_id parameter is set, impacting how single sign-on sessions are handled.
glide.authenticate.multisso.ui.digest_auth_enabled This property enables or disables access to digest authentication within the Multi SSO UI, impacting how users authenticate securely.
glide.authenticate.multisso.ui.federation_enabled This property enables or disables access to digest authentication via the Multi SSO UI, impacting user authentication methods.
glide.authenticate.multisso.ui.transform_map.simple This property configures whether users see a modal window with mapping assist options or are taken directly to the Transform Map record when editing.
glide.authenticate.multisso.user.autoprovision This property allows for the automatic creation and updating of user records in the user table from multiple identity providers, enhancing user provisioning efficiency.
glide.authenticate.multissov2_feature.enabled This property enables the MultiSSOv2 version, which provides improved security features for Single Sign-On configurations.
glide.authenticate.mutual.enabled This property activates mutual authentication, requiring both parties to present valid certificates for secure access.
glide.authenticate.oauth.post.token.expiration.cookie_auth.disabled This property controls the disabling of cookie authentication for OAuth token expiration, affecting how tokens are managed during user sessions.
glide.authenticate.only.allow.active.user.login This property enforces that only users with an active status can log into the ServiceNow instance, preventing access from inactive accounts.
glide.authenticate.policy.debug This property activates detailed logging for authentication policy processes, assisting in diagnosing authentication-related problems.
glide.authenticate.policy_based_login_experience.debug This property activates debug logging specifically for the policy-based login experience, allowing for detailed insights into the authentication process.
glide.authenticate.policy_based_login_experience.enabled This property activates the policy-based login experience, allowing the creation and management of identifier-first login policies that dictate user authentication methods.
glide.authenticate.policy_based_login_experience.ifl.enabled This property configures the system to present relevant login methods based on the user's context during the login process.
glide.authenticate.policy_based_login_experience.login_hint.enabled This property enables or disables the passing of the login_hint parameter to OIDC and SAML IDPs, affecting how user identifiers are handled during login.
glide.authenticate.policy_based_login_experience.override_sso_cookie Enabling this property changes how the glide_sso_id cookie functions, specifically during Policy-Based Login, by relying on IFL policy evaluation for authentication instead of auto-redirecting users.
glide.authenticate.policy_based_login_experience.remembered_identifiers.display_count It configures the number of recent login identifiers displayed to users, enhancing the login experience by allowing quick access to previously used accounts.
glide.authenticate.policy_based_login_experience.remembered_identifiers.enabled It activates the option for users to view and select from their previously used login identifiers during the Identifier-First Login process.
glide.authenticate.policy_based_login_experience.show_more_login_options Enabling this property displays extra login options as hyperlinks on the Identifier First Login page, improving user experience.
glide.authenticate.policy_based_login_experience.sso_source.before_policy.enabled It controls whether the system resolves the IdP from the sso_source field before or after evaluating policies during login, impacting user authentication flow.
glide.authenticate.policy_based_login_experience.sso_source.evaluation.enabled It determines whether the system uses the sso_source field for IdP resolution during login, defaulting to policy-based evaluation if disabled.
glide.authenticate.preauth.allow.trusted.device This property controls whether trusted devices can bypass certain authentication checks during the login process.
glide.authenticate.reauth.logout.first This property enforces a logout requirement for users prior to re-authentication, enhancing security in SSO scenarios.
glide.authenticate.saml.patch This property activates a check to validate the nameid in SAML responses, enhancing security during authentication processes.
glide.authenticate.secret_key This property defines the secret passphrase for SSO encryption and decryption, impacting secure authentication processes.
glide.authenticate.show.max.sso.login.option The property determines how many Single Sign-On options users can see when logging in, with a maximum limit of ten.
glide.authenticate.sso.saml2.audience This property configures the audience URI for SAML2 token acceptance, typically set to the instance's URI for secure authentication.
glide.authenticate.sso.saml2.authncontextclassref This property configures the AuthnContextClassRef for SAML 2.0 authentication requests, influencing how users are authenticated by the Identity Provider.
glide.authenticate.sso.saml2.banner.threshold.days This property determines when to show expiry warnings for the SP keystore or IdP certificate, defaulting to 90 days before expiration.
glide.authenticate.sso.saml2.clockskew This property defines the maximum clock skew in seconds for SAML 2.0 authentication, defaulting to 180 seconds.
glide.authenticate.sso.saml2.createrequestedauthncontext This property configures whether to include an AuthnContextClass request in the SAML AuthnRequest, influencing the authentication method presented by the Identity Provider.
glide.authenticate.sso.saml2.enable_relay_state_with_id When set to true, this property ensures that the relay state parameter in SAML requests contains a reference to a secure redirect URL, enhancing security against replay attacks.
glide.authenticate.sso.saml2.encryption.keystore This property determines the specific keystore (identified by sys_id) used for encryption in SAML 2.0 authentication, impacting security configurations.
glide.authenticate.sso.saml2.idp This property defines the URL of the Identity Provider that generates SAML2 tokens for user authentication.
glide.authenticate.sso.saml2.idp.supportForceAuthn This property determines if the IdP can enforce re-authentication for users during SSO sessions.
glide.authenticate.sso.saml2.idp_authnrequest_url It defines the URL where the SAML AuthnRequest is sent for authentication, impacting SSO functionality.
glide.authenticate.sso.saml2.idp_logout_binding This property determines the binding method for SAML 2.0 logout requests, allowing either HTTP-Redirect or HTTP-POST as the communication method.
glide.authenticate.sso.saml2.idp_logout_url It defines the URL where the LogoutRequest is sent as part of the SAML authentication process, impacting user logout behavior.
glide.authenticate.sso.saml2.issuer This property specifies the issuer URL used in SAML 2.0 authentication requests, which is critical for establishing trust with identity providers.
glide.authenticate.sso.saml2.keystore This property determines the active keystore by its sys_id for SAML authentication, impacting the security of SSO configurations.
glide.authenticate.sso.saml2.nameid_policy This property specifies the NameID format used in SAML responses, which is essential for matching users in the User table.
glide.authenticate.sso.saml2.require_signed_authnrequest This property determines whether the Identity Provider's Single Sign-On service requires signed AuthnRequests for successful authentication.
glide.authenticate.sso.saml2.require_signed_logoutrequest This property configures the requirement for signed LogoutRequests in SAML2 Single Logout processes, ensuring compliance with Identity Provider specifications.
glide.authenticate.sso.saml2.service_url This property defines the homepage URL that users are redirected to after successful single sign-on authentication.
glide.authenticate.sso.saml2.sign_algorithmURI This property defines the URI of the signature algorithm applied when signing SAML authentication requests, impacting the security of the authentication process.
glide.authenticate.sso.saml2.signing_key_alias This property defines the alias for the signing key used in SAML 2.0 authentication requests, impacting the integrity of SSO transactions.
glide.authenticate.sso.saml2.signing_key_password This property defines the password used to access the signing key in the SAML 2.0 SP Keystore, essential for signing authentication requests.
glide.authenticate.sso.saml2.user_field This property determines which User table field corresponds to the NameID element in SAML responses, impacting user authentication.
glide.authenticate.sso.update.idp.cookie This property enables the automatic update of the glide_sso_id cookie to reflect the currently active Auto Redirect IdP configuration, ensuring users are redirected appropriately.
glide.authentication.external.disable_local_login This property disables local login, mandating the use of SSO credentials for authentication on the main login page.
glide.basicauth.update_last_login_time This property controls the updating of Last login and Last login time fields in user records when basic authentication is used for web requests.
glide.conv_ai_voice.step_up.enabled This property determines whether step-up authentication is required for AI voice agents, adding an extra layer of security for sensitive requests.
glide.entry.login.public.pages It configures the system to ignore certain predefined login pages, facilitating navigation to the appropriate portal login page based on the glide.entry.page.script property.
glide.entry.page.script This property specifies the script that determines the login URL for users accessing the ServiceNow instance.
glide.ip_address_controls.migrated This boolean property determines whether the migration of IP Address Control IP ranges to the Adaptive Auth IP Filter is active.
glide.kmf.ldap.url This property defines the LDAP URL for fetching instance certificates, impacting secure communications and authentication processes.
glide.ldap.authentication This property configures the system to authenticate user passwords using LDAP, enhancing security and integration with existing directory services.
glide.ldap.group.initial.query This property sets a search filter for LDAP group queries, defaulting to (objectClass=group) if unspecified.
glide.ldap.initial.dn This property sets the DN for an account used to connect to the LDAP directory, enabling user authentication and data retrieval.
glide.ldap.onetime.password.enabled This property activates one-time password functionality as a fallback when the LDAP server is down, enhancing user access reliability.
glide.ldap.target.groups This property specifies the target OUs for mapping LDAP entries to ServiceNow user groups, allowing for multiple entries separated by commas.
glide.ldap.target.ou This property specifies which OUs to include when searching for user records in the LDAP directory, allowing for targeted filtering.
glide.ldap.url This property sets the LDAP server address and port for ServiceNow, enabling user authentication and directory services integration.
glide.ldap.use.ssl This property configures the system to use SSL for LDAP connections, enhancing security during data transmission.
glide.ldap.user.autoprovision This property allows for the automatic provisioning of users from LDAP, enhancing user management efficiency by reducing manual entry.
glide.ldap.user.query.attribute This property defines a single LDAP attribute for querying users, which is essential for accurate user authentication and retrieval in LDAP configurations.
glide.login.autocomplete This property determines whether browsers can automatically fill in password fields on login forms, improving user experience.
glide.login.locate.sso.captcha.enabled This property enables or disables CAPTCHA verification for SSO logins, adding an extra layer of security against unauthorized access.
glide.login.locate.sso.google.captcha.secret This property configures the secret key for Google reCAPTCHA, enhancing security during user login processes.
glide.login.locate.sso.google.captcha.site_key This property configures the site key used for Google reCAPTCHA verification on login forms, enhancing security against automated logins.
glide.login.no_blank_password This property prevents users from logging in without supplying a password, enhancing system security.
glide.multifactor.onetime.code.validity This property defines how long a one-time code remains valid after being sent to a user's email, impacting the authentication process.
glide.oauth.allow.parameters.in.post.body.only This property enforces the use of POST body parameters exclusively for OAuth token requests, enhancing security and compliance with OAuth standards.
glide.oauth.clients.allowed.for.implicit.grant This property allows specified OAuth clients to utilize the implicit grant type, which is generally discouraged due to security risks.
glide.oauth.cors.allowed.origin This property defines which domains are permitted to make cross-origin requests to ServiceNow's OAuth endpoints, facilitating integration with browser-based applications.
glide.oauth.enable.jwt.requester_id This property determines whether the requester ID is considered when generating JWT tokens, affecting the security of token-based authentication.
glide.oauth.enforce_restricted_binding_for_ui This property ensures that access tokens generated for OAuth entities cannot be used for UI interactions, enhancing security by restricting token usage.
glide.oauth.entity_profile_denylist This property defines which oauth_entity_profiles prevent admins from viewing the 'Token received' field, enhancing security by limiting access to sensitive credential information.
glide.oauth.inbound.client.credential.grant_type.enabled This property allows the use of the client credentials grant type for OAuth inbound integrations, enhancing security for external API calls.
glide.oauth.inbound.ropc.grant_type.disabled This property controls whether the resource owner password credentials grant type is allowed for inbound OAuth token requests, impacting authentication security.
glide.oauth.integration_registry.oob_clients This property defines a string of sys_ids representing the default out-of-box OAuth clients in ServiceNow.
glide.oauth.oidc.blacklisted_metadata_urls This property allows administrators to define a list of OIDC metadata URLs that enforce the use of 'email' as the user claim and field in the OIDC Provider Configuration.
glide.oauth.oidc.provision.email_claim This property defines the source field for the email claim used in OAuth-OIDC automatic user provisioning, linking it to the corresponding SYS_USER field specified in another property.
glide.oauth.oidc.provision.email_field This property defines which SYS_USER field receives the 'email' claim from ID Tokens during automatic user provisioning and updates.
glide.oauth.oidc.provision.username_claim This property defines the source field for the 'username' claim in OAuth-OIDC provisioning, facilitating user account creation based on incoming ID Tokens.
glide.oauth.oidc.provision.username_field This property defines the target field in SYS_USER for mapping the 'username' claim from incoming ID tokens, facilitating accurate user provisioning and updates.
glide.oauth.outbound.token.request.via_mid.enabled It determines whether OAuth token requests are routed through a MID server or handled directly by the instance, impacting how external integrations authenticate.
glide.oauth.pkce.external.code_verifier_size This property configures the integer size of the code verifier used in OAuth PKCE for external authentication providers, ensuring compliance with security standards.
glide.oauth.pkce.skip_client_secret_validation This property controls the acceptance of OAuth token requests without a valid client_secret for non-public clients when PKCE is used.
glide.oauth.state.paramater.required This property enforces the necessity of a State parameter in OAuth authorization requests, which helps maintain security during the authorization code flow.
glide.oauth.state.parameter.required This property enforces the inclusion of the state parameter in OAuth requests, which is crucial for maintaining security during the authentication process.
glide.oauth.token.scope.useraccount This property allows the configuration of the useraccount auth scope sys ID, which is essential for OAuth token validation when the original scope is deleted.
glide.oauth.update_last_login_time This property controls the updating of Last login and Last login time fields in user records when an integration user authenticates via OAuth.
glide.preauth.device.trust.skip.user.registration This property determines whether the mobile app skips device registration for users identified by IP filters, enhancing user experience by reducing registration steps.
glide.pwd_reset.onetime.token.validity This property defines how long a password reset URL remains valid before it expires, impacting user access to reset their passwords.
glide.security.forgot_password.display.link This property controls whether the 'Forgot Password' link appears on the login page, facilitating user password recovery.
glide.security.multisso.check_table_exists_for_clone This property enables a check for the existence of the sso_properties table during cloning operations between instances with differing multisso configurations.
glide.security.password_reset.uri It defines the URI for the password reset functionality within the ServiceNow platform, impacting how users access password recovery options.
glide.security.response.authenticate.header.auth_profile.first_scheme_on This property configures the behavior of the authentication response header for REST APIs, allowing either a single scheme or multiple schemes to be returned based on its value.
glide.service_portal.sso.early_redirect.portals This property allows the configuration of specific portal suffixes for early SSO redirection, enhancing user experience during login.
glide.session.admission.returning_auth_user_cookie.hmac_key This property provides a secure HMAC key for signing cookies that identify returning users, ensuring that session data remains tamper-proof.
glide.sg.reauthentication.single_use_token This property, when enabled, ensures that reauthentication tokens are single-use, enhancing security by preventing token reuse.
glide.sg.rest.authentication_failure_message This property sets the specific message returned to users when their authentication attempt fails due to an incorrect password.
glide.sso.acr.enabled This property controls the availability of the Account Recovery feature, which allows designated administrators to bypass SSO for user access recovery.
glide.sso.acr.ui.session.timeout This property defines the timeout period for account recovery user sessions, terminating them after a specified duration of inactivity.
glide.sys.logout_prompt This property determines whether users receive a confirmation prompt when attempting to log out of the system.
glide.trusted.device.max.count This property defines the maximum number of devices that a user can mark as trusted for authentication purposes, enhancing security while allowing user flexibility.
glide.ui.forgetme It disables the 'Remember me' feature on the login interface, ensuring that user sessions are not retained across logins.
glide.ui.login.style.background.image This property allows the specification of a background image for the login page, overriding any custom background color settings.
glide.ui.m.auth.allow_biometrics This property allows users to authenticate via biometrics when re-signing documents electronically, enhancing user convenience and security.
glide.ui.m.reauth.require_username This property enforces the requirement for users to input their username again when prompted during the reauthentication process.
glide.ui.polaris.login.show_welcome This property enables or disables the display of welcome text on the login page, allowing for customization of the user login experience.
glide.ui.remember.me.default This property determines whether the 'Remember me' option is checked by default during user login, facilitating easier access for returning users.
glide.ui.user_cookie.life_span_in_days This property sets the expiration duration, in days, for user cookies generated upon successful authentication, impacting user session persistence.
glide.user.authentication.gates This property configures the authentication gates for user access, influencing the methods available for user login.
glide.user.default_password This property specifies a default password for newly created users, which must be changed at the first login.
glide.user.max_unlock_attempts This property controls the limit on failed login attempts, impacting user account lockout behavior and security.
glide.user.unlock_timeout_in_mins This property specifies the unlock timeout duration for user accounts after they have been locked due to failed login attempts, with a recommended minimum value of 15 minutes.
glide.userauthgate.extauth.check This boolean property activates the UserAuthenticationGate checks for external authentication methods, enhancing security protocols.
glide.webauthn.attestation_type This property configures the type of attestation used in Web-Authentication for multi-factor authentication, influencing how user identity is verified.
glide.webauthn.auto_prompt.enabled This property configures the system to automatically prompt users for web authentication on the multi-factor validation page.
glide.webauthn.cross_platform_self_attestation This property allows users to register roaming authenticators without additional verification steps, enhancing user experience during the registration process.
glide.webauthn.debug.enabled This property activates detailed logging for web-authentication processes, assisting in diagnosing issues during authentication.
glide.webauthn.enabled This property activates FIDO2-based MFA, allowing users to authenticate using hardware keys or biometric methods.
glide.webauthn.platform_self_attestation This property determines whether self attestation is permitted during the registration of platform authenticators.
glide.zta.continuous_authentication.audit_rentention_period This property configures the number of days that continuous authentication audit logs are retained, with a range from 1 to 180 days.
glide.zta.continuous_authentication.debug.enabled This property activates debugging information for Continuous Authentication, assisting in troubleshooting related issues.
glide.zta.continuous_authentication.enabled This property directly controls the activation of Continuous Authentication, which is essential for implementing Zero Trust security measures.
glide.zta.continuous_authentication.excluded_tables This property defines a string of table names that are excluded from having continuous authentication policies applied.
glide.zta.default.high_assurance.session.lifespan This property specifies the duration of high assurance sessions upon user login, impacting how long users remain authenticated before needing to re-authenticate.
glide.zta.high_assurance.session.max.login.failed_attempts This property limits the number of failed authentication attempts before a user is logged out during high assurance sessions, enhancing security against unauthorized access.
glide.zta.high_assurance.session.timeout It defines the timeout period in minutes for high assurance sessions, after which users must re-authenticate to maintain access.
jwt.provider.expiry.interval.limit It configures the maximum duration that JWT tokens remain valid before expiration, impacting authentication processes.
password_reset.captcha.ignore It allows the system to ignore captcha validation during password reset processes, facilitating automated testing scenarios.
password_reset.qa.ans_min_len This property enforces a minimum character length for security answers during password resets, enhancing security by preventing overly simple answers.
password_reset.qa.num_reset This property configures the integer value for the number of security questions needed for a password reset request.
password_reset.request.expiry This property specifies the expiration time for password reset requests, ensuring they are only valid for a limited duration.
password_reset.request.max_attempt This property limits the number of failed password reset attempts to enhance security and prevent unauthorized access.
password_reset.request.max_attempt_window This property specifies the duration users must wait before they can attempt to reset their password again after reaching the limit of failed attempts.
password_reset.request.max_email It restricts the frequency of password reset email requests to enhance security and reduce potential spam.
password_reset.request.retry_window This property sets the duration in minutes before the retry count for password reset requests is cleared, impacting user access and security protocols.
password_reset.request.success_window It specifies the duration a user must wait before they can initiate another password reset after a successful one.
password_reset.request.unlock_window It specifies the duration a user must wait to request a password reset after their account has been unlocked, with a default of 1440 minutes.
password_reset.sms.default_complexity This property specifies the integer value representing the number of digits in the SMS verification code for password resets.
password_reset.sms.expiry This property sets the duration before an SMS password reset code becomes invalid, with a default of 5 minutes.
password_reset.sms.max_per_day This property limits the daily number of SMS codes sent for password verification, helping to manage system resources and prevent spam.
password_reset.sms.pause_window It specifies the duration users must wait before they can send a new SMS code for verification, with a default value of 2 minutes.
password_reset.sms.use_notify This property determines whether SMS notifications for password reset codes are sent using the Notify service.
password_reset.softpin.expiration_days This property sets the expiration period for Soft PINs, determining how long they remain valid before requiring renewal.
password_reset.softpin.expiration_reminder_time This property configures the specific time in HH:MM format when the Soft PIN expiration reminder is dispatched to users.
password_reset.softpin.expiration_reminder_warn_days It determines the advance notice period for Soft PIN expiration reminders, defaulting to 10 days.
password_reset.softpin.history_limit It defines the maximum number of Soft PINs that can be reused, allowing values between 1 and 30.
password_reset.softpin.min_length This property defines the minimum character length for SoftPINs used in verification processes, impacting user authentication security.
password_reset.stylesheet This property determines which style sheet is applied to the password reset pages, allowing for customization of the user interface.
password_reset.verification.delay It configures a delay to limit the speed of identification or verification processing, enhancing security against automated guessing attacks.
password_reset.wf.refresh_rate This property configures the polling interval for monitoring the completion of password reset and change workflows.
password_reset.wf.timeout This property defines the timeout period for password reset workflows, determining how long they remain active before expiration.
pwd_reset.enable.dbListener This property controls the activation of the DBListener for monitoring user and group insertions, deletions, and password reset processes.
pwd_reset.enable.password_expiration_reminder This property controls whether users receive reminders about upcoming password expiration, helping to maintain account security.
sn_app_lens_core.lens_enable_auto_login This property determines whether ServiceNow AI Lens will automatically log in users without prompting for credentials after the initial sign-in.
sn_atf.headless.login_button_id This property defines the specific ID of the login button element, impacting how the login page is rendered and interacted with during automated testing.
sn_atf.headless.login_page This property defines the URL for the login page that the headless client uses to authenticate users, defaulting to login.do.
sn_bm_client.is_kaa_auth_enabled This property determines whether certificate-based authentication is utilized for the Benchmark Client's connection to the central server.
sn_build_agent.kaa_jwt_provider_id This property defines the sys_id of the JWT Provider used for KAA token generation in the Build Agent application.
sn_build_agent.kaa_oidc_client_id This property configures the OIDC Client ID for JWT audience claims in the Build Agent application, impacting how authentication tokens are validated.
sn_devops.token_auth.user It sets the user account for token authentication, defaulting to 'devops.system', which is required for completing DevOps integration tasks.
sn_ext_usr_reg.Reg_link_expiration_days This property defines the number of days a registration link is valid before it is deactivated, impacting user registration security.
sn_ext_usr_reg.csm_portal.pwd_cred_store This property defines the unique identifier for the credential store utilized by the External User Registration application.
sn_personal_auth.com.glide.core.automation.personal.auth.ui.collection It controls whether usage data for the Personal Auth UI Page is collected, impacting analytics and reporting.