How to avoid Multi-Factor Authentication (MFA) for a user profile in sys_user table?

AbdurRahmanSnow
Tera Guru

Good afternoon.!
How to avoid Multi-Factor Authentication (MFA) for a user profile in sys_user table? 

Requirement: I created a user profile (Service Account) in Test instance and now, we do not want MFA for it?
How can we achieve it? Please help. 

This is a service account that needs to be able to run autonomously without MFA, the account needs to be excluded from MFA in ServiceNow if possible. It has been excluded from MFA in Entra, but is still being prompted by SN to set up MFA.

AbdurRahmanSnow_0-1765195429814.png
@Ankur Bawiskar @Dr Atul G- LNG @Viraj Hudlikar 

5 ACCEPTED SOLUTIONS

Dr Atul G- LNG
Tera Patron

Hi @AbdurRahmanSnow 

 

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1709783

 

 

*************************************************************************************************************
If my response proves useful, please indicate its helpfulness by selecting " Accept as Solution" and " Helpful." This action benefits both the community and me.

Regards
Dr. Atul G. - Learn N Grow Together
ServiceNow Techno - Functional Trainer
LinkedIn: https://www.linkedin.com/in/dratulgrover
YouTube: https://www.youtube.com/@LearnNGrowTogetherwithAtulG
Topmate: https://topmate.io/dratulgrover [ Connect for 1-1 Session]

****************************************************************************************************************

View solution in original post

Ankur Bawiskar
Tera Patron

@AbdurRahmanSnow 

simply add that user to this group (MFA Exempted User Group) and MFA will be disabled for that user, this is from Yokohama onwards

AnkurBawiskar_0-1765201100256.png

also check these links

MFA enforcement exception 

Multi-Factor Authentication (MFA) Enforcement FAQ 

💡 If my response helped, please mark it as correct and close the thread 🔒— this helps future readers find the solution faster! 🙏

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

View solution in original post

RaghavSh
Mega Patron

@AbdurRahmanSnow  Go to "sys_user_group" table and look for  group named "MFA Exempted User Group".

This is OOB group. Add the user to this group to exclude from MFA.

 


Raghav
MVP 2023
LinkedIn

View solution in original post

DiveshTyagi
Kilo Guru

Hi @AbdurRahmanSnow ,

Option 1: Use MFA Exemption

  1. Navigate to
    System Security → Multi-Factor Authentication → MFA Exemptions

  2. Create a new MFA Exemption record

  3. Specify the User / Role / Condition for which MFA should be skipped

  4. Save the record

This allows MFA to be bypassed only for specific users or scenarios, without weakening global security.


Option 2: Use Conditional MFA Policy

  1. Navigate to
    System Security → Multi-Factor Authentication → MFA Policies

  2. Open the applicable MFA Policy

  3. Add conditions such as:

    • User role

    • Network location

    • Authentication context

  4. Exclude the specific user via condition logic

MFA will apply only when conditions are met.

 

 

*************************************************************************************************************
If my response proves useful, please indicate its helpfulness by selecting " Accept as Solution" and " Helpful." This action benefits both the community and me.

 

 

View solution in original post

9 REPLIES 9

Dr Atul G- LNG
Tera Patron

Hi @AbdurRahmanSnow 

 

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1709783

 

 

*************************************************************************************************************
If my response proves useful, please indicate its helpfulness by selecting " Accept as Solution" and " Helpful." This action benefits both the community and me.

Regards
Dr. Atul G. - Learn N Grow Together
ServiceNow Techno - Functional Trainer
LinkedIn: https://www.linkedin.com/in/dratulgrover
YouTube: https://www.youtube.com/@LearnNGrowTogetherwithAtulG
Topmate: https://topmate.io/dratulgrover [ Connect for 1-1 Session]

****************************************************************************************************************

Hi @AbdurRahmanSnow 

 

Hope KB works for you.

*************************************************************************************************************
If my response proves useful, please indicate its helpfulness by selecting " Accept as Solution" and " Helpful." This action benefits both the community and me.

Regards
Dr. Atul G. - Learn N Grow Together
ServiceNow Techno - Functional Trainer
LinkedIn: https://www.linkedin.com/in/dratulgrover
YouTube: https://www.youtube.com/@LearnNGrowTogetherwithAtulG
Topmate: https://topmate.io/dratulgrover [ Connect for 1-1 Session]

****************************************************************************************************************

RaghavSh
Mega Patron

Refer :https://www.servicenow.com/community/virtual-agent-forum/how-to-remove-mfa-for-selected-users-in-ser... 

 

Ideally it should be done from MFA context policy.


Raghav
MVP 2023
LinkedIn