Zero Trust Access for Mobile

concept australia Updated Sep 10, 2026 1 min read zero-trust-access-mobile.md

Zero Trust Access (ZTA) is a security model that assumes that no user or device is trusted by default.

You can use the Zero Trust Access - Session Access policy within the Adaptive Authentication policy to reduce the roles or privileges of the particular session in mobile for users.

To enable Zero Trust Access on mobile, you must perform the following tasks:

Session Access configurations can only be performed with security_admin role. You must elevate your role to security_admin.
Activate the Zero Trust - Policy Based Session Access com.snc.zero_trust_session_access policy.
Enable the glide.authenticate.session_access.mobile.enabled from the system properties table.[Omitted image "enable-zero-trust-access-mobile.png"] Alt text: Zero Trust Access Mobile Enabled
Configure the glide.authenticate.session_access.mobile.refresh_token_interval property to control session access on mobile based on the refresh token.[Omitted image "idp-setup-zero-trust-access-mobile.png"] Alt text: Refresh token configuration

Note: You must configure the refresh token seconds when using an IDP for Mobile App logins. By default, users are logged out from the mobile apps after 1800 seconds (30 minutes).
Set Enable Zero Trust Access to true under Application Registries for the mobile client application (OAuth client). In this case, ServiceNow Agent (Now Agent) and ServiceNow Request (Now Mobile).[Omitted image "application-registry-trust-access-mobile.png"] Alt text: Application Registry
Configure the Session Access role to either reduce or remove roles for users logging in based on the policy inputs and conditions. To learn more about the configuration, see Configure Session Access role.

The configuration evaluates the login to reduce or remove the roles of the users who access your ServiceNow® instance based on the policy filters and conditions. For more information, see Configure Zero Trust Access for mobile.

33 lines · 2.7 KB Wrap lines

---
title: Zero Trust Access for Mobile
description: Zero Trust Access \(ZTA\) is a security model that assumes that no user or device is trusted by default.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/zero-trust-access-mobile.html
release: australia
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Zero Trust Access, Access Management]
---

# Zero Trust Access for Mobile

Zero Trust Access \(ZTA\) is a security model that assumes that no user or device is trusted by default.

You can use the Zero Trust Access - Session Access policy within the Adaptive Authentication policy to reduce the roles or privileges of the particular session in mobile for users.

To enable Zero Trust Access on mobile, you must perform the following tasks:

-   Session Access configurations can only be performed with `security_admin` role. You must elevate your role to `security_admin`.
-   Activate the **Zero Trust - Policy Based Session Access** `com.snc.zero_trust_session_access` policy.
-   Enable the **glide.authenticate.session\_access.mobile.enabled** from the system properties table.\[Omitted image "enable-zero-trust-access-mobile.png"\] Alt text: Zero Trust Access Mobile Enabled
-   Configure the **glide.authenticate.session\_access.mobile.refresh\_token\_interval** property to control session access on mobile based on the refresh token.\[Omitted image "idp-setup-zero-trust-access-mobile.png"\] Alt text: Refresh token configuration

    **Note:** You must configure the refresh token seconds when using an IDP for Mobile App logins. By default, users are logged out from the mobile apps after 1800 seconds \(30 minutes\).

-   Set Enable Zero Trust Access to true under **Application Registries** for the mobile client application \(OAuth client\). In this case, **ServiceNow Agent** \(Now Agent\) and **ServiceNow Request** \(Now Mobile\).\[Omitted image "application-registry-trust-access-mobile.png"\] Alt text: Application Registry
-   Configure the Session Access role to either reduce or remove roles for users logging in based on the policy inputs and conditions. To learn more about the configuration, see [Configure Session Access role](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/configure-session-access-role.md).

The configuration evaluates the login to reduce or remove the roles of the users who access your ServiceNow® instance based on the policy filters and conditions. For more information, see [Configure Zero Trust Access for mobile](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/mobile/configure-zero-trust-access-mobile.md).