Mobile UI obfuscation (instance security hardening)

Use the glide.ui.m.blur_ui_when_backgrounded property to obfuscate all fields from the snapshot as the image is saved during the backgrounding process. to obfuscate.

On Android devices, the Android operating system takes a screenshot for usage in the recent task menu when the application is sent to background. Users can also take manual screenshots of the application, which are stored publicly on the device.

On iOS devices, the iOS operating system also allows applications to save an image file. This file represents the last screen seen by the user when the application is sent to the background. While the intent is to provide a better user experience, it also creates a security risk because the images are saved as PNG image files.

Note:

This setting or configuration is per instance basis so the user must connect to the instance with the property configured.

To obfuscate all fields from the snapshot in the ServiceNow Classic app, see Configure the blur app option to improve security.

Example

When you set this property to true. Background application is obfuscated for iOS devices, and blacked out for Android iOS devices.

More information

Attribute	Description
Property/Plugin Name	glide.ui.m.blur_ui_when_backgrounded
Configuration type	System Properties (/sys_properties_list.do)
Configurable in Instance Security Center	No
Purpose	To obfuscate all fields from the snapshot as the image is saved during the backgrounding process.
Recommended value	true
Functional Impact	If the glide.ui.m.blur_ui_when_backgrounded property is set to true, the native apps use the parameter defined on the server to blur the screen when the app enters the background. It blurs the screenshots taken by iOS and Android when the app enters the background. The user experience may be adversely affected because they would not be able to see the content when the app is sent to background.
Security risk	(Medium) A compromised (jailbroken) device would enable an attacker to have full access to the file system, with access those files/snapshots with sensitive information embedded in them.

To learn more about adding or creating a system property, see Add a system property.