glide.oauth.block_websvc_session_for_ui The glide.oauth.block_websvc_session_for_ui property determines whether web service sessions are blocked for UI access. When enabled, it enhances security by preventing unauthorized access through web service sessions, which is crucial for maintaining data integrity.
trueThe answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | This property, when set to true, blocks web service sessions from being used in the user interface, thereby restricting access and improving security. |
|---|---|
| What area does it affect? | Security and Authentication |
| What does the default mean? | The default value is "true", which means this behavior is enabled by default. |
| When should you review it? | Review this property when assessing security configurations or during audits of access controls. |
Raw metadata from the property record.
| Property name | glide.oauth.block_websvc_session_for_ui |
|---|---|
| Sys ID | 128070efff0322103808ffffffffff25 |
| Type | boolean |
| Application | Global |
| Default value | true |
| Description | |
| Updated | 2025-10-06 12:24:26 |
Official references and nearby text excerpts where this property appears.
glide.oauthOther properties in the same namespace.
glide.oauth.allow.parameters.in.post.body.only
This property enforces the use of POST body parameters exclusively for OAuth token requests, enhancing securit
glide.oauth.cors.allowed.origin
This property defines which domains are permitted to make cross-origin requests to ServiceNow's OAuth endpoint
glide.oauth.enable.jwt.requester_id
This property determines whether the requester ID is considered when generating JWT tokens, affecting the secu
glide.oauth.enforce_restricted_binding_for_ui
This property ensures that access tokens generated for OAuth entities cannot be used for UI interactions, enha
glide.oauth.entity_profile_denylist
This property defines which oauth_entity_profiles prevent admins from viewing the 'Token received' field, enha
glide.oauth.inbound.ropc.grant_type.disabled
This property controls whether the resource owner password credentials grant type is allowed for inbound OAuth
glide.oauth.integration_registry.oob_clients
This property defines a string of sys_ids representing the default out-of-box OAuth clients in ServiceNow.
glide.oauth.oidc.blacklisted_metadata_urls
This property allows administrators to define a list of OIDC metadata URLs that enforce the use of 'email' as