password_reset.redirect.allowed_domains The password_reset.redirect.allowed_domains property specifies which domains or URLs are permitted for redirection after a password reset. Admins should configure this to ensure users are redirected only to trusted locations, enhancing security during the password reset process.
The answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | This property defines a list of allowed domains for redirection after a password reset, ensuring that only specified hosts can be used. |
|---|---|
| What area does it affect? | Password Reset Functionality |
| What does the default mean? | No default value is documented in this property record. |
| When should you review it? | Review this property when setting up or updating password reset procedures to ensure secure redirection. |
Raw metadata from the property record.
| Property name | password_reset.redirect.allowed_domains |
|---|---|
| Sys ID | 649f79815326c3103991abd3a0f7b412 |
| Type | string |
| Application | Global |
| Default value | Not set |
| Description | Comma-separated list of domains (or full URLs) an absolute sysparm_redirect_url is allowed to redirect to after a password reset, when it doesn't match the process's own configured Redirect URL. Matching is by host only. |
| Updated | 2026-08-06 11:01:53 |
Official references and nearby text excerpts where this property appears.
password_resetOther properties in the same namespace.
password_reset.history.limit
This property sets the limit on the number of previous passwords that are checked for reuse when a user resets
password_reset.qa.ans_min_len
This property enforces a minimum character length for security answers during password resets, enhancing secur
password_reset.qa.num_enroll
This property defines how many security questions users must answer during the enrollment phase, impacting the
password_reset.qa.num_reset
This property configures the integer value for the number of security questions needed for a password reset re
password_reset.request.expiry
This property specifies the expiration time for password reset requests, ensuring they are only valid for a li
password_reset.request.max_attempt
This property limits the number of failed password reset attempts to enhance security and prevent unauthorized
password_reset.request.max_attempt_window
This property specifies the duration users must wait before they can attempt to reset their password again aft
password_reset.request.max_email
It restricts the frequency of password reset email requests to enhance security and reduce potential spam.