Let's talk about security in a way that's easy to digest. As a
ServiceNow Product Owner, I understand the significance of security
hardening cannot be overstated when it comes to strengthening and
for...
If you’ve ever wondered: Where does Platform Security stop and SecOps or
Risk start? Do I actually need all of these security products? How does
risk (and now AI) fit into all of this? You’re definite...
Portal-Specific Authentication:Configure It Your Way Tailor login
experiences per Service Portal — different IdPs, local login, or both —
all without touching the Login widget. Out of the box, startin...
ServiceNow Data Privacy delivers at every level — from classifying
sensitive data out of the box, to AI-powered protection where
traditional rules fall short, with more capability unlocking as you
sca...
Session Validation Context The Security Layer You're Probably Missing
The Blind Spot in Your Adaptive Authentication Setup If you've
configured Adaptive Authentication on your ServiceNow instance, you...
In Part 1, we covered the fundamentals of REST API Access Policies — how
to restrict APIs by authentication method, IP, role, and group. But what
happens when those fundamentals aren't enough? What if...
Adaptive Authentication is one of the most powerful security controls
available on the ServiceNow platform — giving you the ability to enforce
contextual access policies based on IP address, device tr...
Every day, enterprises handle enormous volumes of sensitive data —
personally identifiable information (PII), protected health information
(PHI), financial records, and more. The risks are real: data ...
If you've ever wondered how to control who can access your APIs and
under what conditions, this blog is for you. We'll walk you through REST
API Access Policies — what they are, why you need them, and...
As often happens around the holidays, I found myself with a lot more
time that wasn't taken up by meetings, so I set out to better understand
ServiceNow's Log Export Service (LES). I created a tool to...
When ServiceNow acts as an OAuth client for outbound integrations to
third-party applications, understanding how refresh token expiration
works is essential for maintaining seamless connectivity. One ...
Introduction: What is Security Center? ServiceNow Security Center is
your organization’s central hub for managing ServiceNow AI Platform.
Designed to simplify and strengthen your security posture, it ...
Persona: Admins, architects, and developers who own access control
configuration Overview If you are done tolerating guesswork in access
debugging and you want deterministic visibility, clean diagnost...
Persona: Admins, architects, and developers who own access control
configuration Successful access control implementation requires
strategic planning before configuration. Planning Your Access Control...
Persona: Admins, architects, and developers who own access control
configurationIntroduction: Why Planning First Pays Off Successful access
control in ServiceNow begins long before anyone touches the ...