Combined Password Reset release notes for upgrades from Washington DC to Zurich

How to use this page

To help you prepare for your upgrade, we have combined the cross-family Password Reset release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Washington DC to Zurich.

Tip:

If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release."

Important information for upgrading Password Reset to Zurich

Before you upgrade to Zurich, review these pre- and post-upgrade tasks and complete the tasks as needed.


Release	Release notes
Washington DC	No updates for this release.
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich	No updates for this release.

New features

Between your current release family and Zurich, new features were introduced for Password Reset.


Release	Release notes
Washington DC	Experience improved expiration settings of Soft PIN Give your users the experience of secured Soft PIN enrollment. While enrolling for the Soft PIN verification, they can view the number of days in which the Soft PIN expires. While resetting the Soft PIN, users view the rules that their Soft PIN must comply with. Also, users get email and ServiceNow® Virtual Agent notifications when their passwords are about to expire. As a Password Reset administrator, you can configure the Soft PIN expiration settings such as setting the number of days when the passwords expire, the frequency of sending password expiration reminder emails, and history policies on Soft PIN. These settings are enabled by default even if you've upgraded Password Reset from the previous version. View the security score for your Password Reset processes View the security score for your Password Reset processes. Based on the score, you get notifications for potential configuration improvements to the processes. While creating the Password Reset process, view security scores for the process. If you see any deviations between the maximum attainable and current scores, you get an email with an actionable list of recommendations to improve the configuration. You get informative messages indicating whether the process configuration is ideal. Evaluate configurations for identification and verification steps. If your configurations are less secure, get process-wise actionable suggestions on how to improve the strength. Note: Starting Washington DC, the Self-Service or the Service Desk Password Reset Experience is restricted for security_admin users. Only a user with the `security_admin` role can set the password of another `security_admin` user using the sys_user record to further enhance the security.
Xanadu	No updates for this release.
Yokohama	Deny ACLs for Password Reset Access Enhance the security of Password Reset related tables by restricting access to non-authenticated users through Deny ACLs.
Zurich	No updates for this release.

Changes

Between your current release family and Zurich, some changes were made to existing Password Reset features.


Release	Release notes
Washington DC	No updates for this release.
Xanadu	Enhancing Password Reset Security URL Control the expiration duration of a password reset URL by setting the `glide.pwd_reset.onetime.token.validity` property. By default, the URL is valid for one hour.
Yokohama	No updates for this release.
Zurich	No updates for this release.

Removed

Between your current release family and Zurich, some Password Reset features or functionality were removed.


Release	Release notes
Washington DC	No updates for this release.
Xanadu	No updates for this release.
Yokohama	Password Reset workflows are deprecated and have been replaced by flows in the base system for most users. zBoot users must still use the Password Reset flows.
Zurich	No updates for this release.

Deprecations

Between your current release family and Zurich, some Password Reset features or functionality were deprecated.


Release	Release notes
Washington DC	The 3DES encryption and decryption have been deprecated in the Password Reset flows and workflows.
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich	No updates for this release.

Activation information

Review information on how to activate Password Reset.


Release	Release notes
Washington DC	Password Reset is a ServiceNow AI Platform feature that is active by default.
Xanadu	Password Reset is a ServiceNow AI Platform feature that is active by default.
Yokohama	Password Reset is a ServiceNow AI Platform feature that is active by default.
Zurich	Password Reset is a ServiceNow AI Platform feature that is active by default.

Additional requirements

If any additional requirements were introduced or changed for Password Reset we have noted them here.


Release	Release notes
Washington DC	No updates for this release.
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich	No updates for this release.

Browser requirements

If any specific browser requirements were introduced or changed for Password Reset we have noted them here.


Release	Release notes
Washington DC	No updates for this release.
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich	No updates for this release.

Accessibility information

Review details on accessibility information for Password Reset, such as specific requirements or compliance levels.


Release	Release notes
Washington DC	No updates for this release.
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich

Localization information

If there are specific localization considerations for Password Reset we have noted them here.


Release	Release notes
Washington DC	No updates for this release.
Xanadu	No updates for this release.
Yokohama	No updates for this release.
Zurich	No updates for this release.

Highlight information

If there are specific highlight considerations for Password Reset we have noted them here.


Release	Release notes
Washington DC	Let your users experience the improved security of Soft PIN conforming to its expiration. As a Password Reset administrator, configure the Soft PIN expiration settings for an assured and secured Soft PIN enrollment. View the security score for your Password Reset processes. Based on the score, you get notifications for potential configuration improvements to the processes. Use the password_reset.request.max_email property to set the maximum number of times a user can receive the "Reset Password" link through email, in a span of 24 hours. See Password Reset for more information.
Xanadu	Control the duration of the validity of the Password Reset URL provided in a notification email. See Password Reset for more information.
Yokohama	Enhanced security for all client-callable script includes by switching off the sandbox mode. Enhanced security access for Password Reset tables. See Password Reset for more information.
Zurich	Coral is the new default theme for Next Experience and Core UI, offering a more modern experience. See Password Reset for more information.