Basic Auth Restriction Banner Message
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
Started getting this banner appear after logging in to all 3 instances.
After reviewing the Identified Users table, there are 2 "users" that we need assistance on.
1) System Administrator User - this is only used for and logged into the module to move update sets up from Dev/Test and then Prod
2) eSignifi Service Account User - this is the connector for the DocuSign integration and processes envelopes from and to Service Now for signatures.
They are showing as the Decision as "Apply default form system property" on both. Not having any issues with either account if it is kept at this type of "Decision".
However, after following the "instructions' on both the opened banner message and the KB article (which is identical to the message), we have tried changing both of them to different options.
If we select the "Maintain current login" then this happens:
On sys admin user - the connection between the instances is broken so can't move update sets from instance to instance.
On the service account - the envelopes go to DocuSign, but fail to return to Service Now once executed
We know if we put them on SSO, this will go away. However, both the OOB System Administrator User and the Service Account user do not have an email address for SSO to work.
The web service access type blocks UI login so that option doesn't work either.
The enforcement scheduled job is set to run on 6/17/26 on all 3 instances, so we need direction on how to avoid these 2 key user accounts from being disabled.
Thanks!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
Why not keep them as is, if you are having no issues?
FYI: using a specific user (not sys admin) for update set retrieval is best practice.
Please mark any helpful or correct solutions as such. That helps others find their solutions.
Mark
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2 weeks ago
Hello,
As Mark pointed out, I would designate a user for update set retrievals (usually your sys admin). The integration should use OAuth(2.0) or another method like Mutual Authentication (mLTS).