ServiceNow Security Questions OOTB design

[georgechen]

Hi folks,

Just been asked by my colleague who is a Functional Spec Analyst who is writing a documentation about ServiceNow Security, one requirement is about two layers security protection, I know ServiceNow has username and password to identify a user identity, but wonder if there is a security questions mechanism also to enhance the security in Fuji release.

Any input would be appreciated.

Kind regards,

George

[sergiu_panaite]

Hi George,

Currently ServiceNow doesn't supports 2 factor authentication in Fuji release, but it has a plugin for it in Geneva (Activate multifactor authenticator ).

For Fuji, I've seen some customers using SecureAuth but I've not configured it so not sure how good it is:

ServiceNow (SP-initiated) Integration Guide - SecureAuth 8.0 Documentation - SecureAuth Wiki Documen...

Regards,

Sergiu

[Brian Dailey1 · Accepted solution]

Hi George,

You could also write your own code to present another challenge at login, if you have a table with security questions stored for the users.

1. Look in the module "Installation Exits" and you can find the login script being used on your instance (it might just be "Login", or it could be one of the SSO scripts if you're using something like that).
2. You can insert some functionality in this login script to query the security questions table on the username provided and prompt for an answer.   Then either allow the login to proceed or force it to fail, depending on their success.

Good luck,

-Brian

[georgechen]

Thanks Brain. I was able to locate the Installation Exits -> Logon, and modify the scripts.   I will leave it for now, as this question was for documentation purposes asked by my colleague.

Thanks for your assistance.

Kind regards,

[Dimple1107]

Brian Dailey1

How i can make that logic if i need 2 face authentication I have same requirement

1 simple username and password 

2 Security qiestion which user set first time they login