- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-13-2024 12:06 AM
Is there a way to receiving the push notification without logging in ServiceNow app?
Users use only once a month, so some users are not logged in when the notification is sent.
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-13-2024 04:30 AM
In general, it is not required for a user to be logged in to a mobile app in order to be able to receive push notifications. There are apps out there that don't have any user registration and/or authentication logic, but still use push notifications.
In ServiceNow, devices with push apps where users agreed to receive push notifications are registered in the Push Notification Installations [sys_push_notif_app_install] table. That table has an Active flag to indicate if sending push messages to the respective device is allowed. When a user logs out from the app on their mobile device, that flag is set to false. When they log in again, it is set to true.
I don't know where the logic for changing the state of the Active flag resides, but you should be able to prevent the change with a simple business rule on the Push Notification Installations [sys_push_notif_app_install] table. Note, however, that it can create a security breach in your mobile applications. So think (at least) twice before doing it.
Blog: https://sys.properties | Telegram: https://t.me/sys_properties | LinkedIn: https://www.linkedin.com/in/slava-savitsky/
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-13-2024 12:19 AM
Hi @empty
I doubt mate, login is must to receive the push notification.
If my response proves useful, please indicate its helpfulness by selecting " Accept as Solution" and " Helpful." This action benefits both the community and me.
Regards
Dr. Atul G. - Learn N Grow Together
ServiceNow Techno - Functional Trainer
LinkedIn: https://www.linkedin.com/in/dratulgrover
YouTube: https://www.youtube.com/@LearnNGrowTogetherwithAtulG
Topmate: https://topmate.io/atul_grover_lng [ Connect for 1-1 Session]
****************************************************************************************************************
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-13-2024 04:30 AM
In general, it is not required for a user to be logged in to a mobile app in order to be able to receive push notifications. There are apps out there that don't have any user registration and/or authentication logic, but still use push notifications.
In ServiceNow, devices with push apps where users agreed to receive push notifications are registered in the Push Notification Installations [sys_push_notif_app_install] table. That table has an Active flag to indicate if sending push messages to the respective device is allowed. When a user logs out from the app on their mobile device, that flag is set to false. When they log in again, it is set to true.
I don't know where the logic for changing the state of the Active flag resides, but you should be able to prevent the change with a simple business rule on the Push Notification Installations [sys_push_notif_app_install] table. Note, however, that it can create a security breach in your mobile applications. So think (at least) twice before doing it.
Blog: https://sys.properties | Telegram: https://t.me/sys_properties | LinkedIn: https://www.linkedin.com/in/slava-savitsky/
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-13-2024 08:07 PM
Thanks for the reply. I understood well about push notification.
Then, if you know, please tell me what kind of security breaches can occur.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-14-2024 03:32 AM
From a security standpoint, the risk I foresee is that unauthorized persons who possibly have access to the target device may see information they should not see and, in case of actionable push notifications, interact with them. There may also be other concerns, which I am unaware of. I am not a information security expert.
Additionally, there might be an impact on usability because some users may be surprised that they are unable to stop the notifications by logging out from the app.
Blog: https://sys.properties | Telegram: https://t.me/sys_properties | LinkedIn: https://www.linkedin.com/in/slava-savitsky/