---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Change OAuth password parameter

# Change OAuth password parameter {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use this property to ensure only POST body parameters are accepted as input for all
supported grant types.
Sending sensitive information over URI query parameters might lead to sensitive information disclosure by clients, the server, or any host between the requests. Starting with the Madrid release, this new property ensures only the POST body parameters are accepted as input for all supported grant types. Supported grant types include:

* authorization code
* password
* client credential
* refresh token
{#OAuth-token-processor-parm__ul_zms_fx4_jbb}  
{#OAuth-token-processor-parm__table_k3h_zfh_vs__entry__2}

| Property | Description |
|-|-|
| `glide.oauth.allow.parameters.in.post.body.only` | This property is set to true for zBoots only, as part of the OAuth 2.0 plugin. If you need this setting for your instance, create and set the property to true. |
[Table 1. OAuth password parameter property]

{#OAuth-token-processor-parm__table_k3h_zfh_vs}