---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Activate or deactivate an IFL policy

# Activate or deactivate an identifier-first login policy {#ariaid-title1}

Release version: Brazil  
Updated November 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Control whether an identifier-first login policy is included in policy evaluation
by activating or deactivating it.

## Before you begin

Role required: `user_authn_admin`

## About this task

Only active policies are evaluated during the identifier-first login flow. Deactivate a
policy to remove it from evaluation without deleting it.

## Procedure

1. Navigate to AllAuthentication Console.
2. Review the list of identifier-first login policies.  
   The console lists each policy with its evaluation order and active status. The instance evaluates active policies in order and applies the first policy whose conditions match the user. For more information, see [Policy evaluation order](https://www.servicenow.com/docs/2HikQKa2Kfo3YIfNc4zE8A "The instance evaluates identifier-first login policies in order and applies the first policy whose conditions match the user.").
3. Select the policy you want to activate or deactivate.
4. Do one of the following:
   * To include the policy in evaluation, set it to active.
   * To remove the policy from evaluation, set it to inactive.
5. Save your changes.
{#activate-deactivate-ifl-policy__steps}

## Result

An active policy is included in policy evaluation. An inactive policy is retained but
excluded from evaluation.

*[\>]: and then