---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Policy evaluation order

# Policy evaluation order {#ariaid-title1}

Release version: Brazil  
Updated November 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The instance evaluates identifier-first login policies in order and applies the first policy whose
conditions match the user.

## First-match evaluation {#policy-evaluation-order__order}

Identifier-first login policies are evaluated in order. The instance applies the first policy whose conditions match the user and routes the user to the authentication method defined in that policy. Policies are evaluated by their Policy order value,
and lower values are executed first. Only active policies are evaluated; inactive policies are skipped.

## Fallback behavior {#policy-evaluation-order__fallback}

If no policy matches, the instance uses the default routing:

* The instance applies default SSO routing, using the user's SSO source or the default identity provider (IdP).
* If no IdP applies, the instance falls back to the local login page.