New Hires logon for Pre-onboaring without IP restrictions

HyunS · ‎04-29-2025

How can I configure HRSD to allow new hires to complete Pre-Onboarding tasks from personal mobile devices at home (via 5G or Wi-Fi) without being blocked by IP restrictions, while maintaining security policies for existing employees

I am implementing HRSD in my customer side, and I need to allow new hires to access the Pre-Onboarding process from their personal mobile devices at home using 5G or Wi-Fi.

However, currently Service now that was using in my customer site has IP restriction policies that limit access from non-permitted networks.

but since new hires on HRSD module are not yet officially onboarded, they should be able to complete Pre-Onboarding tasks such as seeing their Notifications without being blocked by IP restrictions.

I am looking for a way to configure HRSD so that new hires can logon and complete Pre-Onboarding tasks without being affected by IP restrictions while still maintaining security policies for existing employees.

Are there any recommended settings or best practices for handling IP exception scenarios in HRSD?

Kieran Anson · ‎04-29-2025

You'll need to switch to using adaptive authentication. Specifically using post-authentication where information about the user is known (i.e a new hire vs an employee) and the appropriate decision made on whether to allow or deny access.

https://www.servicenow.com/community/developer-articles/article-17-quot-dependent-field-quot-as-the-...

Note, this does differ to IP addresses control as we only block access once credentials are provided, not before