Authentication

concept australia Updated Sep 10, 2026 3 min read c_Authentication.md
Raw file servicenow.com

ServiceNow's authentication validates the identity of a user who accesses an instance, and then authorizes the user to features that match the user's role or job function.

Get started

[Omitted image "bus-security.svg"] Alt text:Multi-Provider single sign-on (SSO)

Username and password configured in identity providers, which have a matching user account in the database.

[Omitted image "bus-password-reset.svg"] Alt text: OAuth inbound and outbound

OAuth based authentication validates the identity of the client that attempts to establish a trust on the system by using an authentication protocol.

[Omitted image "bus-whitepaper.svg"] Alt text: API access policy

API access policy defines the permissions and access to an API that can be controlled through a policy.

[Omitted image "bus-security.svg"] Alt text: Authentication factorsAuthentication factors

Secure your voice agent access by choosing from flexible authentication options such as app-based codes, push prompts, SMS, SoftPIN or knowledge-based checks.

[Omitted image "bus-sla.svg"] Alt text:Time limited authentication

Configure link based authentication on the ServiceNow instance. The configured link can be shared with the user through Email or SMS and user can use those links to login to instance.

[Omitted image "bus-manager.svg"] Alt text:Multi-factor authentication (MFA)

MFA enables you to provide second level of authentication that includes using passcode from an authentication app, hardware key, biometric authenticator, SMS, or Email.

[Omitted image "bus-get-certified.svg"] Alt text:Certificate based authentication

Unique PEM encoded certificates mapped to users instead of user name and password for certificate based authentication.

[Omitted image "bus-endpoint.svg"] Alt text: Digest token authentication

Username and the secret in the table, perform an hash operation that is user-specific such as SHA1, SHA 256, or MD5. This value has to be appended as part of the URL suffix, which works on the query param.

[Omitted image "bus-profile.svg"] Alt text:LDAP

Integrate with a Lightweight Directory Access Protocol (LDAP) directory to streamline the user login process

[Omitted image "bus-contract.svg"] Alt text:Self-registration

Use external user self-registration to on-board a large volume of external users to your instance.

You can use several different methods to authenticate users. User credentials are matched to different saved credentials for each method.

Note:

  • The Okta SSO plugin is deprecated.
  • To learn more about the security properties that affect authorization processing, see Access control in Instance Security Hardening Settings.
  • You can use SAML and Digest Authentication through the Multiple Provider SSO application.
Search documentation
Search document titles and file paths on the australia branch