Minimize external user registration link expiration duration

reference australia Updated Sep 10, 2026 1 min read sc-external-user-registration-link-expiration.md
Raw file servicenow.com

Manage the number of days that a registration link can be accessed.

If the sn_ext_usr_reg.Reg_link_expiration_days system property is not set to the recommended value of 3, then a registration link could be used by someone other than the intended user if the link is discovered later in time.

Ensure that the property sn_ext_usr_reg.Reg_link_expiration_days is set to 3 or less.

More information

Attribute

Description

Configuration name

sn_ext_usr_reg.Reg_link_expiration_days

Configuration type

System Properties (/sys_properties_list.do)

Data type

Integer

Recommended value

3

Default value

3

Fallback value

3

Category

Authentication

Security risk

  • Severity score: Medium
  • CVSS score: 6.6
  • Security risk details: Longer expiration windows weaken account provisioning security and create opportunities for unauthorized account creation or impersonation.

Dependencies and prerequisites

None

**Parent Topic:**[Authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-authentication.md)
Search documentation
Search document titles and file paths on the australia branch