---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Prevent inactive users from logging in

# Prevent inactive users from logging in {#ariaid-title1}

* Release version: Australia
* 
* Updated March 13, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Configure this property to control if inactive users can authenticate on your
instance.
When the glide.authenticate.only.allow.active.user.login system property is not set to true, users in the User \[sys_user\] table marked inactive can still login to the instance.
Users may be marked inactive if they no longer have permission to login (such as during termination from a company).

Set the glide.authenticate.only.allow.active.user.login property value to the recommended value of true (recommended), to ensures the users in the User \[sys_user\] table marked
inactive cannot log in to the instance and are locked out.

## More information {#sc-prevent-inactive-users-from-logging-in__section_more_information}

{#sc-prevent-inactive-users-from-logging-in__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.authenticate.only.allow.active.user.login |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Category | [Access control](https://www.servicenow.com/docs/UcoTP53NgzpgtyyAIm1CdQ "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 7.5 * CVSS score: High * Security risk details: Inactive users may still access the instance and any data they could previously access. {#sc-prevent-inactive-users-from-logging-in__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
[ ]

{#sc-prevent-inactive-users-from-logging-in__table_ajc_b43_3kb}