Mark service accounts as internal integration users

Dorothy
Tera Contributor

reference the SN documentation with regards to creating service accounts here, my understanding is that this checkbox should be checked so to prevent someone from logging into SN as a normal user would. 

I would like to know that if SSO is enabled, then the ServiceNow login box may not even be presented. In such a case what is best practice? Is this required to be checked in such a scenario or is just a matter of choice? 

1 ACCEPTED SOLUTION

Ashutosh Munot1
Kilo Patron
Kilo Patron

HI,

There is a risk always if you dont check this box as true. If you have a smart engineer from the team with whom you share this details he can try to login to servicenow using the side_door.do or login.do page.


If this pages are disabled then you have no issues. But if not then he can login to this instance using this credentials and if the box is not true. If it is true it will prevent this from happening.


Thanks,
Ashutosh

View solution in original post

6 REPLIES 6

Ashutosh Munot1
Kilo Patron
Kilo Patron

HI,

There is a risk always if you dont check this box as true. If you have a smart engineer from the team with whom you share this details he can try to login to servicenow using the side_door.do or login.do page.


If this pages are disabled then you have no issues. But if not then he can login to this instance using this credentials and if the box is not true. If it is true it will prevent this from happening.


Thanks,
Ashutosh

Dorothy
Tera Contributor

Thanks! That helps 🙂