SN System Properties Reference
Property reference

glide.authenticate.sso.saml2.createrequestedauthncontext

The glide.authenticate.sso.saml2.createrequestedauthncontext property creates an AuthnContextClass request in the AuthnRequest statement. This ensures that the Identity Provider presents a specific login mechanism, affecting how users authenticate in ServiceNow environments.

Default
true
Type
boolean
Application
Global

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? This property configures whether to include an AuthnContextClass request in the SAML AuthnRequest, influencing the authentication method presented by the Identity Provider.
What area does it affect? SAML Authentication Configuration
What does the default mean? The default value is "true", which means this behavior is enabled by default.
When should you review it? Review this property when configuring SAML authentication methods or troubleshooting login issues.

Out of the box property record

Raw metadata from the property record.

Property name glide.authenticate.sso.saml2.createrequestedauthncontext
Sys ID dd82ac1d2080200059d8fe7ecd0be4a1
Type boolean
Application Global
Default value true
Description Create an AuthnContextClass request in the AuthnRequest statement. This tells the IdP that ServiceNow requires that they present a specific login mechanism such as a form, Kerberos, etc. If the AuthnRequest doesn't specify an AuthnContextClass, the IdP will choose the most appropriate method.
Updated 2025-08-24 18:19:53

Sources

Official references and nearby text excerpts where this property appears.

Brazil docs View supporting context
Context preview Snippet 1
... prompt from your ADFS server to appear when you access the instance, set the following SAML 2.0 Update 1 property to false: Create an AuthnContextClass request in the AuthnRequest statement (glide.authenticate.sso.saml2.createrequestedauthncontext‎. (Workaround) Support Kerberos authentication A workaround is available for the SAML 2.0 integration that changes the authentication context from forms-based authentication to Windows-based authentication. Before you begin Role required: sso_config_admin, ...

More in glide.authenticate

Other properties in the same namespace.

glide.authenticate.show.max.sso.login.option The property determines how many Single Sign-On options users can see when logging in, with a maximum limit of glide.authenticate.sso.saml2.audience This property configures the audience URI for SAML2 token acceptance, typically set to the instance's URI for glide.authenticate.sso.saml2.authncontextclassref This property configures the AuthnContextClassRef for SAML 2.0 authentication requests, influencing how users glide.authenticate.sso.saml2.clockskew This property defines the maximum clock skew in seconds for SAML 2.0 authentication, defaulting to 180 seconds glide.authenticate.sso.saml2.debug This property activates detailed logging for SAML 2.0 authentication processes, helping to identify and resolv glide.authenticate.sso.saml2.enable_relay_state_with_id When set to true, this property ensures that the relay state parameter in SAML requests contains a reference t glide.authenticate.sso.saml2.encryption.keystore This property determines the specific keystore (identified by sys_id) used for encryption in SAML 2.0 authenti glide.authenticate.sso.saml2.idp This property defines the URL of the Identity Provider that generates SAML2 tokens for user authentication.

All 73 properties in glide.authenticate →