Use the identifier-first login policies

task brazil Updated Sep 10, 2026 2 min read use-authentication-console.md

Use the identifier-first login policies to view, build, order, and maintain the authentication methods that route users in the policy-based login experience.

Before you begin

Role required: user_authn_admin

The policy-based login experience must be enabled. To learn more, Activate the policy-based login experience.

About this task

The policy-based login experience is a no-code interface for managing the policy-based login experience. From the console, you can view your existing identifier-first login policies, see their evaluation order and status, and perform all policy management actions. For an overview of the console, see Authentication Console.

Procedure

Navigate to All > Authentication Console.
Review the list of identifier-first login policies.

The console lists each policy with its evaluation order and active status. The instance evaluates active policies in order and applies the first policy whose conditions match the user. For more information, see Policy evaluation order.
From the console, perform the policy management action you need:
- To add a policy, create one. See Create an identifier-first login policy for password authentication or Create an identifier-first login policy for SSO authentication.
- To change a policy's conditions, authentication method, or order, edit it. See Edit an identifier-first login policy.
- To include a policy in evaluation or remove it from evaluation without deleting it, activate or deactivate it. See Activate or deactivate an identifier-first login policy.
- To permanently remove a policy, delete it. See Delete an identifier-first login policy.

Result

Your policy changes apply to subsequent identifier-first login evaluations. Active policies are evaluated in order; if no policy matches, the instance uses the default routing.

What to do next

For field descriptions used when building a policy, see Identifier-first login policy field reference.

Keywords use authentication consolePolicy-Based Login Experience consolemanage IFL policiespolicy ordernext-generation login experience

53 lines · 3.9 KB Wrap lines

---
title: Use the identifier-first login policies
description: Use the identifier-first login policies to view, build, order, and maintain the authentication methods that route users in the policy-based login experience.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/platform-security/authentication/use-authentication-console.html
release: brazil
product: Authentication
classification: authentication
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 2
keywords: [use authentication console, Policy-Based Login Experience console, manage IFL policies, policy order, next-generation login experience]
breadcrumb: [Authentication Console, Authentication, Access Management]
---

# Use the identifier-first login policies

Use the identifier-first login policies to view, build, order, and maintain the authentication methods that route users in the policy-based login experience.

## Before you begin

Role required: `user_authn_admin`

The policy-based login experience must be enabled. To learn more, [Activate the policy-based login experience](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/authentication/activate-authentication-console.md).

## About this task

## Procedure

1. Navigate to **All** &gt; **Authentication Console**.

2. Review the list of identifier-first login policies.

The console lists each policy with its evaluation order and active status. The instance evaluates active policies in order and applies the first policy whose conditions match the user. For more information, see [Policy evaluation order](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/authentication/policy-evaluation-order.md).

3. From the console, perform the policy management action you need:

- To add a policy, create one. See [Create an identifier-first login policy for password authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/authentication/create-ifl-policy-password.md) or [Create an identifier-first login policy for SSO authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/authentication/create-ifl-policy-sso.md).
- To change a policy's conditions, authentication method, or order, edit it. See [Edit an identifier-first login policy](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/authentication/edit-ifl-policy.md).
- To include a policy in evaluation or remove it from evaluation without deleting it, activate or deactivate it. See [Activate or deactivate an identifier-first login policy](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/authentication/activate-deactivate-ifl-policy.md).
- To permanently remove a policy, delete it. See [Delete an identifier-first login policy](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/authentication/delete-ifl-policy.md).

## Result

Your policy changes apply to subsequent identifier-first login evaluations. Active policies are evaluated in order; if no policy matches, the instance uses the default routing.

## What to do next

For field descriptions used when building a policy, see [Identifier-first login policy field reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/authentication/ngle-console-field-reference.md).