question Allowing End User to enter data into an Encrypted Field in ServiceNow AI Platform forum

Allowing End User to enter data into an Encrypted Field

ron_tavares — Fri, 10 Feb 2017 13:49:07 GMT

I have an encrypted text field on the Incident form that captures sensitive information about the user. The Encryption Context has been applied to the itil role, so all ITIL users have access to the field and data. That part works fine. But the customer wants to expose this field on the portal, to allow an end user the ability to enter the sensitive information for their own incident. I don't believe this is possible, (at least not directly to that field). I did try creating a separate text field, put that on the portal view, then created a BR that pushes the value from the text field to the encrypted field. But this doesn't appear to digest well. Has anyone ran across this before and do you have a solution?

Re: Allowing End User to enter data into an Encrypted Field

adiddigi — Fri, 10 Feb 2017 14:33:07 GMT

The business rule will not be able to set the encrypted text field, because the business rule still runs in the context of a user who doesn't have an encryption context.

Now, this is definitely possible, and we did this for a (very) large system because we _had_ to. I'll talk about this complex solution below, and if you think if want to go that route, give you the code.

1. Create a separate text field ( which is already done) on the table( let's assume the table to be incident)

2. Create an admin user, and give him that encryption context

3. In the business rule, instead of setting the field directly like you are doing now, you must:

3.1. Call the update function on Incident using the REST/SOAP API of the Incident table.

3.2 Authenticate using the new user you just created in step 2

3.3 Set the encrypted field.

This works because, when you authenticate using the admin user who has encryption context, the system will update the record. I actually built an entire fullblown framework over this idea as we had the need to work with sensitive data ( SSNs ) etc...

Re: Allowing End User to enter data into an Encrypted Field

khadim — Mon, 12 Jun 2017 17:06:48 GMT

Hi Abhiram,

I have same requirement in my project. Can you please share the code you used.

Thanks

Sadaf

Re: Allowing End User to enter data into an Encrypted Field

jeffp — Wed, 11 Oct 2017 03:36:45 GMT

Hello Abhiram , any chance you would be willing to share your code for this? I'm currently working my way through the same problem

Re: Allowing End User to enter data into an Encrypted Field

robert_merriman — Mon, 23 Oct 2017 16:23:21 GMT

Hi Abhiram,

I am looking to get pii (DOB & SSN) from end users and then update their related sys_user record all while encrypting it with a context the end user does not have.

It reads like you are using a rest call to update the record, however I am having issues. It looks like when I do a rest update I don't get any associated encryption context on the field. The user making the call had the context and is able to update the record from the UI with encryption.

If you could provide your code, I believe it would help me better understand how you solutioned this issue.

Regards,

Robb

Re: Allowing End User to enter data into an Encrypted Field

adiddigi — Sun, 29 Oct 2017 23:30:50 GMT

Hey folks - I finally found sometime to write about it here. I hope you guys find it helpful. Let me know.

A Hack To Update Encrypted Fields

Re: Allowing End User to enter data into an Encrypted Field

madhvi — Wed, 22 Jul 2020 06:00:04 GMT

Hi,

Link provided is not working. I have same scenario, Other tool is pushing some PII data via scripted REST API.In HR Profile table we have those fields encrypted.Can you please provide some insights how you handled it?

Thanks

Madhavi

Re: Allowing End User to enter data into an Encrypted Field

Marouane M — Thu, 23 Jul 2020 00:36:26 GMT

I would also love to have this script if possible.