Change approval link request giving 403: Access Forbidden error message through email notification.

[Kanna12]

Hello Community,

I used OOB feature  ${URI_REF} to generate change request link in approval email notification.

1. When i open the link directly via email it is showing "403:Access Forbidden" error. But

2. If i open my service now instance and open the link via email, it is showing approval page in service now.

I am not sure why approval page not opening theough email link.
Approval always needs to open SN Instance and opening Approval link via email notification.

Please suggest me, If i miss anything here.

Thank you

[Allen Andreas]

Hello,

Please check structure of link and verify that the user is authenticated and can access the record.

[Kanna12]

1. Below is the link when i open approval link diarectly via email notification:

https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprod.servicenowservices.com%2Fnav_...

2. Link when i open instance and click approval link via email:

https://prod.servicenowservices.com/now/nav/ui/classic/params/target/sysapproval_approver.do%3Fsys_i...

Could you please help me how can i check and validate further.

[Kanna12]

 Below is the link when i open approval link diarectly via email notification:

https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprod.servicenowservices.com%2Fnav_...

2. Link when i open instance and click approval link via email:

ttps://prod.servicenowservices.com/now/nav/ui/classic/params/target/sysapproval_approver.do%3Fsys_id%3D1c31e86387774a90f945ec680cbb353d%26sysparm_stack%3Dsysapproval_approver_list.do%3Fsysparm_query%3Dsys_created_on%253Ejavascript%3Ags.beginningOfToday()

Could you please help me how can i check and validate further.

[Allen Andreas]

Hi @Kanna12 

So if you're getting a 403 forbidden notice and it's not branded with ServiceNow/your instance, then it looks like your organization may be the culprit. With your email link being scanned for virus/safelinks protection, it could that that component causing the problem. You'd need to discuss this with your organization's IT/networking team.