How are you tracking MFA for Business Applications in ServiceNow?

Andrew Gruden
Tera Contributor

I’m interested in how other organizations track whether a Business Application uses or requires MFA.

  1. Where are you storing the MFA information, and how is it tied back to the Business Application?
  2. Are you using existing ServiceNow tables/structures, or was this a customization?
  3. How well has your approach worked with existing modules or custom processes, especially for keeping the information current?

I’d appreciate hearing what has worked well and anything you would do differently.


Thanks.

3 REPLIES 3

MEBoatman
Giga Guru

This is a GREAT question! I have it on my backlog to address this but haven't been able to prioritize it. Will be interested to hear the responses you get here!

rebekahcurrier
Tera Contributor

We are using an Information Object to track MFA applications.

Chetna_Aggarwal
Tera Contributor

One approach could be to model MFA as a Technical Service/Application Service and relate it to the Business Application. This way, you can easily identify which Business Applications depend on MFA and visualize the relationship in the CMDB.

It also scales better than adding a custom field if you plan to track other shared security services in the future.