Hello A very small number of users logged in by SSO into SN are logged out directly.Hint: SSO Debug is enabled.I have done a Test with PDI and SSO Circle:- using "email" as "user_field" to identify the SSO user in SNTest 1.- add my SSO Circle User em...
I need to fulfill a requirement in ServiceNow to restrict the user's access based on region, then based on data, there are 2 levels of filter or checks after that it will be decided whether that user can read that read or not. I want to keep the dat...
Hi Community,I recently faced an issue where I enabled MFA on my PDI, but I lost access to the passkey, and the email account is not properly configured to receive verification codes.However, I also tried disabling MFA via API, but this approach did ...
Introduction ServiceNow has introduced an important security enhancement to help customers strengthen their cybersecurity posture by restricting insecure Basic Authentication API access for certain users. This change mainly impacts environments where...
what is Elevated privilege?
Just a couple questions on Data Privacy 1. Can you rollback anonymization at anytime after the job has completed (ie. 6 months later) or is it just immediately after job is run? 2. If you anonymize phone number, can you still click on the phone num...
Hi all, I'm securing our Inbound REST APIs using OAuth 2.0 and have created the necessary Application Registry (oauth_entity) records in our Dev instance. I now need to move this configuration to Test and eventually Production, but I'm unsure of the ...
I want to know how ServiceNow protects its inbox from phishing emails, preventing that they are converted to Incidents via inbound email action. We have a few phishing emails that generated incidents in the platform. We thought ServiceNow would ident...
Hello Developers, I was reviewing the post titled "ServiceNow Password Policies – A Complete Guide for Admins".https://www.servicenow.com/community/platform-privacy-security-blog/everything-you-need-to-know-about-password-policies-in/ba-p/3538368 I w...
Hi all,I'm trying to understand the exact execution order between ACL processing and Security Data Filters.From the ACL documentation:A Pre-query ACL check occurs before a database query is executed.The pre-query check only evaluates user roles and d...
Hi everyone,I'm troubleshooting an issue where a user is receiving an HTTP 401 Unauthorized response when calling a ServiceNow Marketplace-related API through Postman using Bearer token authentication.The Authorization header appears to be configured...
Hi, I want to know the information about "ServiceNow Vault." I have searched the community and documentation about that but found nothing useful. If anyone has a meaningful reference to learn about this, it will be helpful. Thank you,
Started getting this banner appear after logging in to all 3 instances. After reviewing the Identified Users table, there are 2 "users" that we need assistance on. 1) System Administrator User - this is only used for and logged into the module to mo...
Hello Community, Is it possible to roll back a data privacy clone in a sub production instance? It looks like the job can be rolled back but the data doesn't actually change. Thanks,Heather
Hi Community, What are some of the options to verify user's identity when they contact helpdesk to reset their MFA?