Configure an authentication policy

task brazil Updated Sep 10, 2026 1 min read configure-allow-access-policy.md

Configure an authentication policy to define inputs and conditions to use to grant access to an instance or enforce multi-factor authentication.

Before you begin

Role required: adaptive_auth_admin

Procedure

Navigate to All > Adaptive Authentication > Authentication Policies > All Policies.

Note: To see examples of completed policies, you can review these policies on your instance:
- DEMO POLICY - Allow Local Login for Admins from the Trusted IP Range only
- DEMO POLICY - Allow Local Login for Admins only
- DEMO POLICY - Restrict Username and Password based Authentication for specific users
Select the New button to create a new policy record.

In the Policy form, fill in the fields.

Field	Description
Name	Name of your policy.
Application	The scoped application for the policy. This field is filled automatically with the current application.
Description	Description of the policy
Active	Whether the policy is active.

From the Policy Inputs tab, select Edit.
Select one or more filter criteria from the Collection list and move them to Policy Inputs List of Allow Access Policy list.

[Omitted image "filter-criteria-allow-access-policy.png"] Alt text: sample filter criteria for allow access policy

Note: For information on creating your own filter criteria to use in this section, see Filter criteria.
From the Policy Conditions tab, select New.

On the form, fill in the fields:

Field	Description
Label	Name to identify the condition.
Description	Description of the condition.
Condition	Logical combination of multiple policy inputs (filter criteria) that is used to evaluate authentication requests. For example, you can create conditions that allow only contractors from a list of trusted IP addresses.

Repeat step 7 to create additional policy conditions.

Note: If you create multiple policy conditions, the final output of the access policy depends on the logical OR output of the all policy conditions. This means the policy will evaluate to true if any one of your policy conditions is met.
Select Save.

68 lines · 3.0 KB Wrap lines

---
title: Configure an authentication policy
description: Configure an authentication policy to define inputs and conditions to use to grant access to an instance or enforce multi-factor authentication.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/platform-security/authentication/configure-allow-access-policy.html
release: brazil
product: Authentication
classification: authentication
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Authentication policies, Adaptive authentication, Authentication, Access Management]
---

# Configure an authentication policy

Configure an authentication policy to define inputs and conditions to use to grant access to an instance or enforce multi-factor authentication.

## Before you begin

Role required: adaptive\_auth\_admin

## Procedure

1.  Navigate to **All** &gt; **Adaptive Authentication** &gt; **Authentication Policies** &gt; **All Policies**.

    **Note:** To see examples of completed policies, you can review these policies on your instance:

    -   DEMO POLICY - Allow Local Login for Admins from the Trusted IP Range only
    -   DEMO POLICY - Allow Local Login for Admins only
    -   DEMO POLICY - Restrict Username and Password based Authentication for specific users
2.  Select the **New** button to create a new policy record.

3.  In the **Policy** form, fill in the fields.

    |Field|Description|
    |-----|-----------|
    |Name|Name of your policy.|
    |Application|The scoped application for the policy. This field is filled automatically with the current application.|
    |Description|Description of the policy|
    |Active|Whether the policy is active.|

4.  From the **Policy Inputs** tab, select **Edit**.

5.  Select one or more filter criteria from the **Collection** list and move them to **Policy Inputs List** of **Allow Access Policy** list.

    \[Omitted image "filter-criteria-allow-access-policy.png"\] Alt text: sample filter criteria for allow access policy

    **Note:** For information on creating your own filter criteria to use in this section, see [Filter criteria](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/authentication/adaptive-auth-filter-criteria.md).

6.  From the **Policy Conditions** tab, select **New**.

7.  On the form, fill in the fields:

    |Field|Description|
    |-----|-----------|
    |Label|Name to identify the condition.|
    |Description|Description of the condition.|
    |Condition|Logical combination of multiple policy inputs \(filter criteria\) that is used to evaluate authentication requests. For example, you can create conditions that allow only contractors from a list of trusted IP addresses.|

8.  Repeat step 7 to create additional policy conditions.

    **Note:** If you create multiple policy conditions, the final output of the access policy depends on the logical OR output of the all policy conditions. This means the policy will evaluate to true if any one of your policy conditions is met.

9.  Select **Save**.