---
sourceDocument: Australia ServiceNow AI Platform Capabilities
sourceDocumentLink: https://www.servicenow.com/docs/r/servicenow-platform

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia ServiceNow AI Platform Capabilities

ft:clusterId :

    - platcap

bundleId :

    - platcap

workflow :

    - Platform


---

# Specify lockout for failed login attempts

# Specify lockout for failed login attempts {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The system provides inactive script actions that enable you to specify the number of
failed login attempts before a user account is locked and to reset the count after a
successful login.

## Before you begin

Role required: password_reset_admin

## Procedure

Navigate to AllSystem PolicyScript Actions to view or activate the scripts.  
Note:  
Starting with the Kingston release, following a zBoot, the script actions SNC User Lockout Check with Auto Unlock and SNC User Clear are activated.

To learn more about
properties that affect failed login attempts, see [Managing failed login attempts (instance security hardening)](https://www.servicenow.com/docs/access?context=sc-managing-failed-login-attempts&version=australia&pubname=australia-platform-security&ft:locale=en-US) in the Instance Security Hardening Settings.
{#t_LockoutForFailedLogins__table_yzs_qcf_g1b__entry__2}

| Script action | Description |
|-|-|
| SNC User Lockout Check with Auto Unlock | * Uses the value of the glide.user.max_unlock_attempts property to set the limit for failed login attempts. * Unlocks the user account after the time period that is specified for the glide.user.unlock_timeout_in_mins property. If no value is specified, then the system unlocks the user account after the default period of 15 minutes. {#t_LockoutForFailedLogins__ul_ppn_4jh_mv} |
| SNC User Lockout Check | Tracks the number of failed login attempts and locks the user account after a specified number of failed login attempts (default: 5). |
| SNC User Clear | Updates the user record after a successful login: Resets the number of failed login attempts and updates the date of the last login. |
[ ]

{#t_LockoutForFailedLogins__table_yzs_qcf_g1b}

## What to do next

Each time a user attempts to log in, the action is recorded in an event log. You can
view a log of failed login attempts.  
1. Navigate to System PolicyEvent Logs.
2. Filter for login.failed in the Name field. You can view the attempted login name, date, and IP address logged for the attempt.
{#t_LockoutForFailedLogins__ol_urj_m4z_k1b}
**Related concepts**   

* [Credential stores for Password Reset](https://www.servicenow.com/docs/CqbJiUGOnSVN4q5UiGqqkA "Credential stores hold user information such as user names and passwords that can be used as login credentials. Examples include the User table [sys_user] or an Active Directory server.")
* [Password Reset verifications](https://www.servicenow.com/docs/x6PnbdYBWs1q3GRnWLUbkw "Each verification specifies the method and process for verifying the identity of the user that is requesting a password reset.")  
**Related tasks**   

* [Configure password expiration reminder](https://www.servicenow.com/docs/E91F1xZ5wRr_aYQgzAQ16w "You can configure the password reset expiration reminder feature to send notifications to change or reset a user’s password whenever it is going to expire.")
* [Configure your Password Reset process to auto-enroll users](https://www.servicenow.com/docs/1u1zhua~Psvr3vK1hOuM8Q "To simplify management, many organizations auto-enroll users in the Password Reset program. Every base-system verification type enables you to specify automatic enrollment for your process.")
* [Enable users to enroll for Password Reset](https://www.servicenow.com/docs/cgYtn_SWVMMYSUaRg7LSQw "To enable users to enroll for the Password Reset program, you specify a UI macro that takes the user through the enrollment process and a script that processes the enrollment data that the user entered. The base system includes a functioning macro and script.")
* [Configure Password Reset properties](https://www.servicenow.com/docs/AtYbZ0Rx_6_SISFLAvDwdA "You can specify properties that configure the Password Reset experience for end users.")
* [Send email to remind users to enroll for Password Reset](https://www.servicenow.com/docs/H0c9_VrSxr8bVE11bkmjcQ "You can automatically send messages that remind users to enrolled in the Password Reset process. You specify the text of the message and can configure the messages to repeat at intervals.")
* [Configure the required strength for passwords](https://www.servicenow.com/docs/z5VVTqyAlY4k5_Vd1C_bpg "The password that a user defines must meet certain requirements — for example, it must contain at least 12 characters, it must include a numeral, and so on. You can configure the requirements as needed for your organization.")
* [Configure Google reCAPTCHA for the password reset process](https://www.servicenow.com/docs/R1Z8X2GR66CQqjEHVQmKpg "To use the Google reCAPTCHA service, instances that are running on a domain other than service-now.com require an API key pair from Google.")  
**Related reference**   

* [Calculating the security score for password reset process](https://www.servicenow.com/docs/tPLCbBQU~6xFfug4eA~kzQ "The security score of the password reset process is a critical metric for the password reset administrators to assess the strength and configuration of the password reset process.")

*[\>]: and then