Authentication release notes
Summarize
Summary of Authentication release notes
The ServiceNow® Authentication application in the Australia release introduces enhanced and updated features to support a variety of authentication mechanisms, improving user identity validation. These updates specifically enhance AI voice service authentication, web embeddables security, and administrative role management.
Show less
Key Features
- Knowledge-based Authentication (KBA) Enhancements:
- Voice input support allows users to respond to KBA questions via spoken answers during identification and authentication.
- Configurable validation patterns using regular expressions and example formats for voice inputs.
- Script-based validation enables custom scripts to validate KBA answers against external authentication systems, especially in Identification mode.
- Authentication Factors for AI Voice Service: Configure identification and authentication factors to grant caller access to AI voice agents.
- Web Embeddables Security: Protect ServiceNow web components embedded in third-party portals by securing authentication.
- Granular Admin Roles: Assign specific administrative roles for Authentication configuration tasks without requiring full admin privileges, enhancing security and role management.
- OAuth Enhancements:
- Support for Opaque or JWT tokens in inbound integration endpoints.
- Option to restrict API access to only those explicitly listed in selected scopes for inbound integrations.
- Ability to configure resource parameters in the OAuth Entity Resource tab for outbound integrations, ensuring these parameters flow into OAuth token requests and responses.
Deprecated Features
- Inbound integration configurations like OAuth API endpoints and OIDC provider verification in the Application registry are deprecated due to the new Machine Identity Console.
- The property
glide.login.noblankpasswordis deprecated and no longer affects login behavior.
Activation and Accessibility
Authentication is a default active product within the ServiceNow AI Platform. The new Coral theme is set as the default for portals, web, and mobile experiences, offering a modern and brand-neutral interface with an optional dark theme.
Related Security Features
ServiceNow Platform Security continues to offer foundational security capabilities such as managing failed logins, encrypted password protection, access control rules, and audit logs to secure your instance comprehensively.
The ServiceNow® Authentication application supports many authentication mechanisms that enable you to validate the identity of users. Authentication was enhanced and updated in the Australia release.
Authentication highlights for the Australia release
- Knowledge-based factor enhancement for AI voice service
- Following are the knowledge-based authentication (KBA) enhancements:
- Voice input support for KBA questions: Configure KBA questions to support Voice as an input type, allowing users to provide spoken responses during identification and authentication. When Voice input is enabled, you can configure the expected format, provide examples, and optionally define a validation pattern using regular expressions.
- Script-based validation for external systems: Configure KBA answers to validate that are created against external systems using custom scripts through the Script Configuration field. When set to Identification mode, you can write scoped scripts that validate caller identity against external authentication systems instead of internal ServiceNow AI Platform tables.
- Enable caller access to AI voice agents by configuring the required identification and authentication factors.
- Secure the web embeddables feature for authenticating the ServiceNow®'s web components that are used in third-party portals.
- Use the granular roles to complete administrative configuration tasks for Authentication without requiring the full admin role.
- Use the enhanced Auth Scope for your Inbound Integrations.
See Authentication for more information.
New in the Australia release
- Authentication factors for AI voice service
- Enable caller access to AI voice agents by configuring the required identification and authentication factors.
- Web Embeddables
- Secure the web embeddables feature for authenticating the ServiceNow®'s web components that are used in third-party portals.
- Granular admin roles
- The granular admin role enables developers and administrators to complete administrative configuration tasks for Authentication without requiring the full admin role.
Changed in this release
- OAuth enhancements
- Following are the OAuth enhancements:
- Use Opaque or JWT token option for your inbound integration endpoints.
- Use the Allow access only to APIs in selected scope option to enable access to the APIs that are explicitly listed in the selected scopes for your inbound integrations.
- Use the OAuth Entity Resource tab for outbound integrations to configure resource parameters so they flow into the OAuth token request and are reflected in the token from your OAuth provider.
Deprecated features
- Due to the launch of new simplified inbound integration configuration in Machine
Identity Console, the following inbound integrations configurations in the Application
registry page are deprecated:
- OAuth API endpoint for external clients
- OAuth JWT API endpoint for external clients
- OIDC provider to verify ID tokens
- The (glide.login.no_blank_password) property is deprecated, since the property is no longer used and changing this property value doesn't effect login behavior.
Activation information
Authentication is a ServiceNow AI Platform product that is active by default.
Accessibility information
- Coral theme
- Coral is now the default theme for new portal, web, and mobile experiences with Next Experience or Core UI enabled. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences.