Is it possible to check in user information whether a password has been set?

[HS7]

Hi
When SSO is enabled, probably set a password for users log in locally, but not for users log in with SSO.
Is it possible to check in user information whether a password has been set?

[Ambuj Tripathi]

Hi @HS7 

Can you please check this question? I have already answered the same question in detail here. Please let me know if you have any queries.

https://www.servicenow.com/community/developer-forum/disable-local-login-i-e-login-do-for-non-admin-...

Thanks!

[kalpanashar]

Yes, it’s possible to check whether a password has been set for a user in ServiceNow—but with some caveats when SSO is enabled.

• For SSO users, the password field in the sys_user table typically remains empty, since authentication is handled externally and ServiceNow doesn’t store or update their password.

• For local login users, if a password has been set, the password field will contain encrypted data. If it’s blank, no password is set.

• You can query the sys_user table and inspect the password field to determine if a password exists. However, due to encryption, you won’t see the actual password—just whether the field is populated.

If you want to prevent SSO users from setting or using local passwords, you can:

• Add a Business Rule on the sys_user table to block password updates for non-admins.

• Modify the Change Password UI Action to only show for users with specific roles.

• Use Adaptive Authentication policies to enforce login restrictions.

[HS7]

Thank you @kalpanashar 

＞Add a Business Rule on the sys_user table to block password updates for non-admins.

Could you tell me how do I set up the business rules?