Property reference

`com.snc.platform.security.token.auth.days.expired.api_key.is.kept`

Sets how many days expired API key credentials are retained before cleanup. A value of 7 or fewer is recommended, and 0 means expired keys are deleted the same day.

Default: defaultValue_apiKey
Type: Not stated
Application: Not stated
Category: Security & Access Control

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	Sets the number of days expired API key credentials are kept before cleanup; values of 0 or greater are valid.
What area does it affect?	API key token cleanup
What does the default mean?	The default value is "defaultValue_apiKey".
When should you review it?	Review when changing expired API key retention or checking token cleanup security settings.

Property record

No out of the box record exists. ServiceNow scripts read this property and use the default value shown until you create it.

Property name	`com.snc.platform.security.token.auth.days.expired.api_key.is.kept`
Type	Not stated
Application	Not stated
Default value	`defaultValue_apiKey`
Description	Not stated

Sources

Official references and nearby text excerpts where this property appears.

Brazil docs View supporting context

Context preview Snippet 1

... expired due to leakage or compromise, reuse exposes the instance to anyone possessing the leaked token. Expired tokens are kept for the number of days defined by the com.snc.platform.security.token.auth.days.expired.hmac_secret.is.kept and com.snc.platform.security.token.auth.days.expired.api_key.is.kept system properties. Integer values of 0 and greater are valid values. A value of 0 causes the expired tokens to be deleted in the same day. The default of 7 ...

Used in

Out of the box artefacts that read this property. Append the path to your instance URL to open the record and see how the value is used.

Check: Set Automatic Token Cleanup for Token Credentials The check reads this setting to determine how long expired API key token credentials are kept; if its value is greater than 7 days, it raises a finding for admins, with no direct change to users. If the setting is missing, the check uses 7 days. /scan_check.do?sys_id=711df15e81181210f87724ace3e18346

More in `com.snc`

Other properties in the same namespace.

com.snc.platform.security.oauth.private.key.url This property defines the URL where the instance's OAuth private key is stored, impacting OAuth… com.snc.platform.security.oauth.ui.show_usage_dashboard This property controls the display of a notification for accessing the integrations usage dashboard… com.snc.platform.security.token.auth.cleanup This property configures whether expired tokens are automatically cleaned up, helping to mitigate security… com.snc.platform.security.token.auth.days.expired.api_key This property configures the expiration duration for API keys, limiting their validity after expiration to… com.snc.platform.security.token.auth.days.expired.hmac_secret.is.kept Sets the retention period in days for expired HMAC secrets; a value of 0 allows deletion on the same day… com.snc.portal.task.default_columns This property specifies which columns are included by default in the task console JSON output, impacting how… com.snc.ppm.yellow_status_duration This property configures the number of working days before a project task's status turns yellow, indicating… com.snc.ppm_multicurrency.demand_currency_setup This property configures whether demand records use the functional currency or a different specified…

All 650 properties in com.snc →