How to Temporarily Disable MFA for Admin User in On-Prem ServiceNow Setup?

[Yaron Rabinovi1]

Hi all,

I’ve installed ServiceNow in an on-prem environment and created an admin user as part of the setup. However, when I try to log in, it prompts for MFA.

I scanned the QR code using Google Authenticator, but when I enter the generated code, I get the "Your password is correct" error. I suspect either a time sync issue or something misconfigured.

Since I can't access the instance, is there any way to temporarily disable MFA via the Linux server or directly through the database, so I can log in and troubleshoot from within the UI?

Any help would be greatly appreciated!

Thanks in advance.

[Ankur Bawiskar]

@Yaron Rabinovi1 

I believe unless and until you have other admin user who is able to login, you can't do much

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Dr Atul G- LNG]

Hi @Yaron Rabinovi1 

The error is related to the password, which means either the wrong password was set up initially, or you're entering the incorrect one now. Try resetting the password first.

Did you verify the KB number mentioned in the error? Since it's on-prem, I'm not sure SN support will be much help. However, you can still log a case with the Now Support team to see if they can assist.

[Yaron Rabinovi1]

Thanks for the responses!

I created another admin user, and I’m encountering the same MFA issue with that user as well.

I’ve already opened a case with ServiceNow Support.

Their initial response was that the KMF configuration might be missing in the on-prem installation, and they’re currently checking internally regarding maint access.

In the meantime, if anyone here knows of a way to bypass or temporarily disable MFA in an on-prem instance (perhaps via the Linux server or DB), that would be extremely helpful while we wait for official guidance.

[Dr Atul G- LNG]

Hi @Yaron Rabinovi1 

There is no way to bypass MFA until unless you logged in.

Setting 'glide.authenticate.multifactor.enforcement.acknowledged' to true dismisses this message

https://www.servicenow.com/community/developer-forum/how-to-disable-the-mfa-related-info-message-app...