---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Non-SSO login

# High assurance session for non-SSO login {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Establish a high assurance session for non-SSO logins (local or LDAP) with ServiceNow continuous authentication.

A high assurance session is a session that requires a user to verify their identity and authenticate with a specific identity or Identity Providers for a specific time frame.

ServiceNow continuous authentication (CA) feature enables you to create policies that create a high assurance session to the users who access personally identifiable information (PII), sensitive data, or
restrict the access to explicit data that you want to protect.

When the user performs step-up authentication (MFA), there's a high assurance session that is established, which provides the ability for the users to access the data protected by the CA administrator based on the CA policy
configuration.

You can create CA policies to verify the users identity and authentication the users to access the data that you've protected. The users who are performing non- SSO based login (local or LDAP) and whenever there is an attempt to access
the protected data, step-up authentication (MFA) screen is prompted to the users.

<br />

After successful authentication, the protected data is displayed to the users for a certain time frame. You can configure the properties to change the time limit based on your requirements. To learn more, see [High assurance session with continuous authentication](https://www.servicenow.com/docs/XVeNojZM8P5ScdniVgElkQ "Establish a high assurance session with ServiceNow continuous authentication.").  
Note:  
If users haven't set up MFA, they must complete the setup.

Performing step-up authentication (MFA) creates a high assurance session establishing a secure and trusted connection with the identities (users) who are accessing the protected data.

A high assurance session established for the user is limited to the High Assurance session length (glide.zta.high_assurance.session.timeout) system property. If the high assurance session time exceeds the
property length, the user is prompted for re-authentication or step-up authentication.
**Related concepts**   

* [High assurance session with continuous authentication](https://www.servicenow.com/docs/XVeNojZM8P5ScdniVgElkQ "Establish a high assurance session with ServiceNow continuous authentication.")
* [Pre-work for Continuous Authentication](https://www.servicenow.com/docs/u_DQ6kp5x6tkpvHnAatKKw "Perform the following pre-work before using Continuous Authentication (CA).")  
**Related tasks**   

* [Configure Continuous Authentication](https://www.servicenow.com/docs/35wTHNadPCtuuTNpq7qEiA "Configure continuous authentication (CA) policies to re-authenticate the users if there's an attempt to access resources that are protected by you.")