---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Disable creating users from incoming emails

# Disable creating users from incoming emails {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the glide.user.trusted_domain property to specify the comma-separated list of trusted domains used in the creation of users from incoming emails.
An administrator can set the glide.pop3readerjob.create_caller system property to automatically create users from incoming emails. If set this property to the insecure value, the instance automatically
creates users from incoming email. Each user created will have the same hardcoded default password which makes bypassing authentication through brute force easier.

Ensure that the glide.pop3readerjob.create_caller system property is set to false.

## More information {#sc-restrict-emails-by-domain__section_wc1_cqn_phc}

{#sc-restrict-emails-by-domain__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.pop3readerjob.create_caller |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | false |
| Default value | false |
| Fallback value | false |
| Category | [Authentication](https://www.servicenow.com/docs/SZIHG9SfxVh2_gyMf2ec2Q "The authentication category covers the main elements of modern authentication to confirm an entity and its claims are authentic and correct, resistant to impersonation and prevent interception of passwords.") |
| Security risk | * Severity score: 5.4 * CVSS rating: Medium * Security risk details: Allowing automatic user creation without strong password controls undermines authentication security and increases the likelihood of system compromise. {#sc-restrict-emails-by-domain__ul_g1g_3sf_xwb} |
| Functional impact | None |
| Dependencies and prerequisites | None |
[ ]

{#sc-restrict-emails-by-domain__table_ajc_b43_3kb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=brazil&pubname=brazil-platform-administration&ft:locale=en-US).