---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Create an IFL policy for password authentication

# Create an identifier-first login policy for password authentication {#ariaid-title1}

Release version: Brazil  
Updated November 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Create an identifier-first login policy that routes matching users to
password-based authentication (a username and password managed within the platform).

## Before you begin

Role required: `user_authn_admin`

## About this task

A password-based identifier-first login policy routes matching users to log in with a username and password
managed within the platform. Use this policy type for users who don't authenticate through
single sign-on (SSO). For a policy that routes users to an identity provider, see [Create an identifier-first login policy for SSO authentication](https://www.servicenow.com/docs/07gSc7m3fMNwQpahTbcJRA "Create an identifier-first login policy that routes matching users to a single sign-on (SSO) identity provider.").

## Procedure

1. Navigate to AllAuthentication Console.
2. In the Authentication Console, open the Policies tab and select the option to create a policy.
3. Under Policy Details, enter a Name (required) and, optionally, a Description.
4. Under Authentication Method, select Use Password.  
   Use Password routes the user to log in with a username and password managed within the
   platform for basic authentication.
5. Under Conditions, specify the conditions that determine when the policy applies.
   1. Select a Field and an Operator, and enter a value.
   2. To combine conditions, use or and and, or select Add condition set to add another set of conditions.
6. Under Policy evaluation, select Active to apply the policy during login, and enter a numeric Policy order value.  
   Only active policies are evaluated. Policies are evaluated by order value, and lower
   values are executed first.
7. Select Create Policy.
{#create-ifl-policy-password__steps}

## Result

The policy appears on the Policies tab. When active, matching users are routed to
password-based authentication during the identifier-first login flow.

*[\>]: and then