---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Configure Certificate-based authentication properties

# Configure Certificate-based authentication properties {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use system properties to enable or disable certificate-based authentication features.

## Before you begin

Role required: sso_config_admin

## Procedure

1. Navigate to AllCertificate Based AuthenticationProperties.
2. On the form, fill in the fields:  
   {#configure-certificate-authentication__table_fh4_vb1_b4b__entry__2}

   | Property | Description |
   |-|-|
   | Enable certificate based authentication | Option to enable Certificate-based authentication for both user interface logins and inbound web services. Default: true Note: On the Portal pages, use the Form Layout to add the field to the form and then enable the property. |
   | Show 'Log in with PIV/CAC' option in login screen | Displays the Log in with PIV/CAC card option on the login screen. Allows users to log in using Certificate-based authentication using the user interface. Default: false |
   | Enable auto-redirect for certificate based login | Determines whether to require that the user select Log in with PIV/CAC card after selecting a registered certificate and entering their PIN. Activate to automatically log in the user after they select a registered client certificate and enter their PIN. Deactivate to require that the user select Log in with PIV/CAC card after they select a registered client certificate and enter their PIN. Default: false |
   [Table 1. Certificate Based Authentication Properties form]

   {#configure-certificate-authentication__table_fh4_vb1_b4b}

*[\>]: and then


