IP Address Access Controls and Side Door

[Kyle Mastio1]

We are looking to implement an external single sign on solution, but as part of that we want to allow only IP ranges specified through IP Address Access Controls.   In that scenario, if you were to try and access side_door.do from an IP address that is outside the allowed range will it fail or does side_door bypass the access controls?

[josh_nerius · Accepted solution]

Hi Kyle,

Direct login methods such as the side door do not bypass IP Access Controls.

Regards,

Josh

[Bhavesh Jain1]

If you activate IP Address Control you will not be able to even load the URL of your Servicenow instance if you do not fall into that IP range. So there is no question of any login page getting loaded.

IP Address is the best security as there is no question of password hacking/sharing because the login screen will never appear.

[Nestor Paredes]

This can be an option:

Adaptive authentication by Daniel Garcia
Adaptive Authentication use case for ACME Bank by Sanchita Medar 

We are experiencing a similar issue where we need login.do and a Self service portal to be available while restricting the rest of the instance.

Regards,

N>