Verification types in the base system

  • Release version: Washingtondc
  • Updated February 1, 2024
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Verification types in the base system

    This document outlines different verification types available in the base system, designed to assist in user identity verification during password reset processes. These verification types can be utilized as templates for creating custom verifications tailored to specific needs.

    Show full answer Show less

    Key Features

    • Personal Data Confirmation: Verifies user identity using data from the User table, suitable for service desk-assisted processes without enrollment required.
    • Personal Data: Allows users to verify identity by answering questions from their user data, also without enrollment required.
    • Email Code: Sends a verification code to the user's email for password reset confirmation.
    • Google Authenticator: Users provide a code from the Google Authenticator app during password reset.
    • Security Questions: Users answer personal security questions to verify identity.
    • SMS Code: Sends a verification code to a user’s SMS-capable device for identity confirmation.
    • Mock: A non-functional verification type used for demonstration purposes, not supported by the Password Reset Windows Application.

    Key Outcomes

    By understanding the available verification types, ServiceNow customers can effectively implement user identity verification methods that enhance security during password resets. This ensures a streamlined process while maintaining user verification integrity. Customers can also customize these verifications based on specific organizational requirements, facilitating optimal user experiences.

    Use a verification type in the base system as a template to design a custom verification.

    Table 1. Verification types in the base system
    Verification type Description
    Personal Data Confirmation Verifies user identity using data from the User [sys_user] table. The user data is displayed to a service desk agent. The agent verifies the data.

    Enrollment is not required for this type.

    Recommended for service desk-assisted processes.
    Note:
    The Password Reset Windows Application does not support the Personal Data Confirmation Verification type.

    See Personal data identification types and confirmation type verifications.
    Personal Data Verifies user identity using data from the User [sys_user] table. The user is required to answer questions.

    Enrollment is not required for this type.

    Note:
    The Password Reset Windows Application allows you to define and use multiple verifications of the Personal Data type.
    See Personal data identification types and confirmation type verifications.
    Email Code When a user requests password reset, the system sends a verification code to the email address in the user profile or to an email address that the user authorized during enrollment. To verify identity, the user then submits the code on the Password Reset Verify page.
    Note:
    The Password Reset Windows Application allows you to define and use multiple verifications of the Email Code type.
    See Personal data identification types and confirmation type verifications.
    Google Authenticator While requesting password reset, the user reads a code from the Google Authenticator app on a device that the user has paired. To verify identity, the user then submits the code on the Password Reset Verify page.
    Note:
    The Password Reset and Password Reset Windows Application support only a single verification of the SMS Code type.
    Security Questions Verifies user identity by presenting personal security questions that the user must answer correctly.
    Note:
    The Password Reset and Password Reset Windows Application support only a single verification of the Security Questions type.

    See Add a custom question to the Security Questions verification.
    SMS Code When a user requests password reset, the system sends a code to an SMS-capable device that the user has authorized. To verify identity, the user then enters the code on the Password Reset web page.
    Note:
    The Password Reset and Password Reset Windows Application support only a single verification of the SMS Code type.
    See SMS Code Verification type for Password Reset.
    Mock Not a functional identity verification. Demonstrates how to add a verification type in a Password Reset process.
    Note:
    The Password Reset Windows Application does not support the Mock verification type.
    • The enrollment UI macro for this verification gets the user input and returns the entered value in the enrollment processor.
    • The Password Reset UI macro for this verification gets input from the user and returns the entered value through the verification processor.