---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Use the IFL policies

# Use the identifier-first login policies {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the identifier-first login policies to view, build, order, and maintain the authentication methods that route users in the policy-based login experience.

## Before you begin

Role required: `user_authn_admin`

The policy-based login experience must be enabled. To learn more, [Activate the policy-based login experience](https://www.servicenow.com/docs/Si3sc37mZXa~NGw~6RWhMw "Activate the policy-based login experience so that you can create and manage the identifier-first login policies that drive the policy-based login experience.").

## About this task

The policy-based login experience is a no-code interface for managing the policy-based login experience. From the console, you can view your existing identifier-first login policies, see their evaluation order and status, and perform all policy
management actions. For an overview of the console, see [Authentication Console](https://www.servicenow.com/docs/M4bpezEagqFdYJWXy6Bjrw "The Authentication Console enables administrators to configure and manage authentication behavior across a ServiceNow instance, including identifier-first login policies and related settings.").

## Procedure

1. Navigate to AllAuthentication Console.
2. Review the list of identifier-first login policies.  
   The console lists each policy with its evaluation order and active status. The instance evaluates active policies in order and applies the first policy whose conditions match the user. For more information, see [Policy evaluation order](https://www.servicenow.com/docs/2HikQKa2Kfo3YIfNc4zE8A "The instance evaluates identifier-first login policies in order and applies the first policy whose conditions match the user.").
3. From the console, perform the policy management action you need:
   * To add a policy, create one. See [Create an identifier-first login policy for password authentication](https://www.servicenow.com/docs/xygA2Mc5fBXNKYcIdbXdiw "Create an identifier-first login policy that routes matching users to password-based authentication (a username and password managed within the platform).") or [Create an identifier-first login policy for SSO authentication](https://www.servicenow.com/docs/07gSc7m3fMNwQpahTbcJRA "Create an identifier-first login policy that routes matching users to a single sign-on (SSO) identity provider.").
   * To change a policy's conditions, authentication method, or order, edit it. See [Edit an identifier-first login policy](https://www.servicenow.com/docs/YAz3e09LMXskgCUSJvTN4w "Modify the conditions, authentication method, or evaluation order of an existing identifier-first login policy.").
   * To include a policy in evaluation or remove it from evaluation without deleting it, activate or deactivate it. See [Activate or deactivate an identifier-first login policy](https://www.servicenow.com/docs/G~x5WgDNn04Wol~poafO6Q "Control whether an identifier-first login policy is included in policy evaluation by activating or deactivating it.").
   * To permanently remove a policy, delete it. See [Delete an identifier-first login policy](https://www.servicenow.com/docs/ZMjN9xMSmaYWwOqfS0YMHA "Permanently remove an identifier-first login policy from the Authentication Console.").
   {#use-authentication-console__choices_kxx_nkf_fkc}
{#use-authentication-console__use-console-steps}

## Result

Your policy changes apply to subsequent identifier-first login evaluations. Active policies
are evaluated in order; if no policy matches, the instance uses the default routing.

## What to do next

For field descriptions used when building a policy, see [Identifier-first login policy field reference](https://www.servicenow.com/docs/OvSXj9wh3ojTnx7K7NRx7Q "Field descriptions for an identifier-first login policy in the Authentication Console.").

*[\>]: and then