For the questions below, I was requested to provide comments which will help explaining the policy or details about question. Kindly help. Asset Management [D.14] In the event of a subpoena or forensics incident, is specific data able to be put on L...
There was an update in ServiceNow where they added 23k new ACLs in our instance for query_range. I noticed when they update a table, they don't update all the fields and it broke our reports. For example, our Group table's ACLs were updated and it ad...
Hi,I have been asked to use GlideRecordSecure instead of GlideRecord in scripted REST APIs by the ServiceNow Application certification team. All my scripted REST APIs use oAuth2.0 authentication with grant type as 'client_credentials'.For non-admin ...
Hi, I need your help here. Company ABC already has MFA and SSO enabled, and documentation says "Beginning in Yokohama, ServiceNow is going to begin enforcing MFA by default for any internal local logins, meaning any login that is not through a Sing...
I was looking for options, what is the best way to detect if someone ingested sensitive information (password to be very specific) into free text fields? (Like adding user-pwd combo into a Work notes of an incident) I found Data Privacy plugin, but ...
I am playing with enabling Email OTP as the only MFA method for 'new hires' who utilise a local user account until they become an employee and then use SSO from their corporate account. While I have been able to setup the Email OTP MFA Context, the u...
Our security group has been working on a Zero trust system using Zscaler. One of the features we are looking to use from Zscaler is the trust exchange, which will route all external users through this "gateway" like device so you can validate users ...
The SailPoint for ServiceNow Service Catalog is not accessible without an admin role, but it should be accessible with the minimum roles provided by SailPoint.It is accessible with the minimum roles provided by SailPoint in one of the environments, b...
What is ServiceNow vault? how its different from other encryption solutions from ServiceNow like Edge Encryption, Column Level Encryption, Enterprise (CLE/PE), Database Encryption, Full Disk Encryption? Is Vault the latest and updated solution and re...
I created new Application Registry with client id and client secret, however, I use "https://dev217112.service-now.com/oauth_redirect.do" for my redirect URL. what the correct URL should I use in SNOW configuration.
Hi everyone,I'm looking for a comprehensive document that outlines every security setting an instance should have—from email architecture to encryption and beyond. Does anyone know of a resource that covers all these aspects? I've already went throug...
I am getting an error when below OOB script include "WorkdayUtils" method is called from a flow action - var newToken = WorkdayUtils.doDecryption(result.access_token); WorkdayUtils.doDecryption = function(accessToken) { var secret = accessToken.su...
SpoilerI'm planning to clone our production instance to a newly purchased test instance, but I want to ensure that sensitive data is not transferred to the test environment. As we may need to perform similar cloning operations during future upgrades,...
Hi all... with the latest security maintainance the system created many ACLs for operation: conditional_table_query_range I am trying to plan fixes for what the maintenance missed, and I seems I may need to create some of these, but there is zero doc...
