SOAP API access policies

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • SOAP API access policies allow you to restrict access to inbound SOAP APIs based on the authentication type and the specified filter criteria of the access policy.

    The SOAP API access policies enables you to have the ability to apply the inbound authentication profile and API access policies to inbound SOAP and scripted SOAP APIs.

    You can leverage ServiceNow API access policies like IP range and role based restrictions to allow or disallow inbound SOAP API calls based on the authentication.

    As an admin, you can perform the following actions to apply the policies.

    • Activate SOAP API Access Policy and Authentication Profile plugins. For more information, see Activate SOAP API access policy.
    • Create SOAP API Access Policies and associate those policies with an authentication profile. For more information, see Create SOAP API access policy and Create an authentication profile.
      Note:
      The policies are applicable to SOAP table API or scripted SOAP API. Besides the standard http and WSSE authentication profile.
    • Create authentication policies such as IP range, role-based restrictions and associate this policy to the authentication profile. For more information, see Create an API authentication policy.