---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Delete an IFL policy

# Delete an identifier-first login policy {#ariaid-title1}

Release version: Brazil  
Updated November 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Permanently remove an identifier-first login policy from the Authentication Console.

## Before you begin

Role required: `user_authn_admin`

## About this task

Deleting a policy permanently removes it. If you want to keep the policy but exclude it from evaluation, deactivate it instead. See [Activate or deactivate an identifier-first login policy](https://www.servicenow.com/docs/G~x5WgDNn04Wol~poafO6Q "Control whether an identifier-first login policy is included in policy evaluation by activating or deactivating it.").

## Procedure

1. Navigate to AllAuthentication Console.
2. Review the list of identifier-first login policies.  
   The console lists each policy with its evaluation order and active status. The instance evaluates active policies in order and applies the first policy whose conditions match the user. For more information, see [Policy evaluation order](https://www.servicenow.com/docs/2HikQKa2Kfo3YIfNc4zE8A "The instance evaluates identifier-first login policies in order and applies the first policy whose conditions match the user.").
3. Select the policy you want to delete.
4. Select Delete.
5. Confirm the deletion.
{#delete-ifl-policy__steps}

## Result

The policy is removed and is no longer evaluated during the identifier-first login
flow.

*[\>]: and then