Join the #BuildWithBuildAgent Challenge! Get recognized, earn exclusive swag, and inspire the ServiceNow Community with what you can build using Build Agent.  Join the Challenge.

Preventing Untrusted Users from Triggering Inbound Actions

wdookie
Mega Contributor

I am looking to prevent untrusted user from triggering inbound actions to create tickets.   I have followed:

Inbound Email Actions - ServiceNow Wiki

but still no luck.

Properties have been set appropriately:

find_real_file.png

Trusted domains when creating new users from incoming email (Ignore email from untrusted domains unless from an existing user; use * for all domains) set to mycompany.com

System Property set to false:

find_real_file.png

Guest User disabled and locked out:

find_real_file.png

But once a send an inbound email from a non-trusted domain account, sure enough I see the Incident created, with the Caller set as Guest!

On Helsinki right now, is there anything that I am misssing????

1 ACCEPTED SOLUTION

wdookie
Mega Contributor

Well folks,



Thanks for all the help on this.   To close the loop on this topic, after speaking with support, this is a known issue within Helsinki.   It will be resolved in the next release, Istanbul.  



Thanks again for the assistance and troubleshoot, I appreciate your time!



Wayne


View solution in original post

12 REPLIES 12

Michael Ritchie
ServiceNow Employee
ServiceNow Employee

You can try Email Filters:


Email Filters - ServiceNow Wiki


andrew_irwin
Kilo Expert

Did you provide your trusted domain(s) list?


Hi Andrew,



Yes I did:



find_real_file.png


jose_valle
ServiceNow Employee
ServiceNow Employee

Hi Wayne,



On the received email, does it show the user id field as a reference to an existing user or does it just show the email address that the email came from? If it is a reference to a user record, which user record is it?



-Jose