---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Create an IFL policy

# Create an identifier-first login policy {#ariaid-title1}

Release version: Brazil  
Updated November 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Create an identifier-first login policy to route users to an authentication
method based on conditions such as IP address, role, or group.

## Before you begin

Role required: `user_authn_admin`

## About this task

Create an identifier-first login policy to define which authentication method applies to a set of users. The
instance evaluates active policies in order and applies the first matching policy.

## Procedure

1. Navigate to AllAuthentication Console.
2. In the Authentication Console, open the Policies tab and select the option to create a policy.
3. Under Policy Details, enter a Name (required) and, optionally, a Description.
4. Under Authentication Method, select SSO login or Use Password.  
   For SSO login, see [Create an identifier-first login policy for SSO authentication](https://www.servicenow.com/docs/07gSc7m3fMNwQpahTbcJRA "Create an identifier-first login policy that routes matching users to a single sign-on (SSO) identity provider."). For Use Password, see [Create an identifier-first login policy for password authentication](https://www.servicenow.com/docs/xygA2Mc5fBXNKYcIdbXdiw "Create an identifier-first login policy that routes matching users to password-based authentication (a username and password managed within the platform).").
5. Under Conditions, define the conditions that determine when the policy applies, using attributes such as IP address, role, or group.  
   When a policy has multiple conditions, all conditions must be met for the policy to match.
6. Under Policy evaluation, select Active to apply the policy during login, and enter a numeric Policy order value.  
   To learn more, see [Policy evaluation order](https://www.servicenow.com/docs/2HikQKa2Kfo3YIfNc4zE8A "The instance evaluates identifier-first login policies in order and applies the first policy whose conditions match the user.").
7. Select Create Policy.
{#create-ifl-policy__steps}

## Result

The policy appears in the console and, when active, is included in policy evaluation during
the identifier-first login flow.

*[\>]: and then