Property reference

`glide.oauth.state.paramater.required`

The glide.oauth.state.paramater.required property mandates the inclusion of a State parameter in OAuth authorization code requests. This requirement enhances security by preventing CSRF attacks, making it crucial for administrators to ensure proper configuration in OAuth flows.

Default: Not stated
Type: Not stated
Application: Not stated

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	This property enforces the necessity of a State parameter in OAuth authorization requests, which helps maintain security during the authorization code flow.
What area does it affect?	OAuth authorization flow
What does the default mean?	No default value is stated in the ServiceNow documentation.
When should you review it?	Review this property when configuring OAuth settings or enhancing security measures for authorization flows.

Property record

Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.

Property name	`glide.oauth.state.paramater.required`
Type	Not stated
Application	Not stated
Default value	Not stated
Description	Not stated

Sources

Official references and nearby text excerpts where this property appears.

Brazil docs View supporting context

Context preview Snippet 1

... Description • (Old‎ Require XMLdoc2 entity validation with allowlistDisable Entity Expansion • (New‎ Require XMLdoc2 entity validation with allowlist Enforce oauth state parameter validation • Description ◦(Old‎ <blank> ◦(New‎ The "glide.oauth.state.paramater.required system" property enables the "State" parameter to be required in an OAuth request for authorization code flow. Beginning in the Madrid release, the system property "glide.oauth.state.parameter.required" adds a "State" parameter ...

More in `glide.oauth`

Other properties in the same namespace.

glide.oauth.oidc.provision.username_field This property defines the target field in SYS_USER for mapping the 'username' claim from incoming ID tokens, f glide.oauth.outbound.token.request.via_mid.enabled It determines whether OAuth token requests are routed through a MID server or handled directly by the instance glide.oauth.pkce.external.code_verifier_size This property configures the integer size of the code verifier used in OAuth PKCE for external authentication glide.oauth.pkce.skip_client_secret_validation This property controls the acceptance of OAuth token requests without a valid client_secret for non-public cli glide.oauth.state.parameter.required This property enforces the inclusion of the state parameter in OAuth requests, which is crucial for maintainin glide.oauth.token.scope.useraccount This property allows the configuration of the useraccount auth scope sys ID, which is essential for OAuth toke glide.oauth.update_last_login_time This property controls the updating of Last login and Last login time fields in user records when an integrati glide.oauth.allow.parameters.in.post.body.only This property enforces the use of POST body parameters exclusively for OAuth token requests, enhancing securit

All 24 properties in glide.oauth →