Continuous authentication system properties
Use system properties to enable and customize continuous authentication (CA) to meet your zero trust access security requirements.
Properties
To access the properties page, navigate to All > Continuous Authentication, select Properties tab.
[Omitted image "ca-system-properties.png"] Alt text: CA System Properties
The following system properties are available for CA.
|
Property |
Description |
|---|---|
|
General Properties | |
|
Continuous Authentication (glide.zta.continuous_authentication.enabled) |
Enable to use Continuous Authentication feature |
|
Enable Debugging (glide.zta.continuous_authentication.debug.enabled) |
Enable to view the debugging information related to continuous authentication. |
|
High Assurance | |
|
High Assurance session length (glide.zta.high_assurance.session.timeout) |
Specify the high assurance session length, after which the end-users should re-authenticate. Default: 10 mins.Note: The value must be between 1 and 480. |
|
Default high-assurance session length upon login (glide.zta.default.high_assurance.session.lifespan) |
Specify the duration in minutes for the default high-assurance session length upon user login. Default value: 5 minutes.Note: The property is only applicable for local login. |
|
Configure end-user display message (glide.zta.high_assurance.session.message) |
Specify the message that is displayed to the end-user for re-authentication. Default message: |
|
Total times failed authentication before user account lock-out (glide.zta.high_assurance.session.max.login.failed_attempts) |
Set the maximum failed authentication attempts before the users are logged out.Note: The value must be between 3 and 10. |
|
Audit properties | |
|
Total no of days to keep audit records (glide.zta.continuous_authentication.audit.lifespan) |
Specify the number of days to save the audit records for CA.Note: The value must be between 1 and 180. |
|
Total no. of days after which policies will be deleted after deactivated (glide.zta.continuous_authentication.policy.lifespan) |
Specify the no of days after which the CA policies are deleted. |
- By default, high-assurance sessions are not required for mobile app sessions, even when a continuous authentication policy is active on source. To change this behavior and block access from mobile app sessions, update the glide.zta.high_assurance.mobile.session.allowed property value to
false. - The sys_properties, sys_continuous_auth_policy, and sys_user tables are excluded for CA and cannot be added to the CA policy configuration.
Related topics
Exploring Continuous Authentication
Continuous authentication policies
--- title: Continuous authentication system properties description: Use system properties to enable and customize continuous authentication \(CA\) to meet your zero trust access security requirements. locale: en-US canonical_url: https://www.servicenow.com/docs/r/platform-security/ca-system-properties.html release: brazil topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [Exploring CA, Continuous Authentication \(CA\), Zero Trust Access, Access Management] --- # Continuous authentication system properties Use system properties to enable and customize continuous authentication \(CA\) to meet your zero trust access security requirements. ## Properties To access the properties page, navigate to **All** > **Continuous Authentication**, select **Properties** tab. \[Omitted image "ca-system-properties.png"\] Alt text: CA System Properties The following system properties are available for CA. <table id="table_vkg_2wf_twb"><thead><tr><th> Property </th><th> Description </th></tr></thead><tbody><tr><td colspan="2"> **General Properties** </td></tr><tr><td> Continuous Authentication \(**glide.zta.continuous\_authentication.enabled**\) </td><td> Enable to use Continuous Authentication feature </td></tr><tr><td> Enable Debugging \(**glide.zta.continuous\_authentication.debug.enabled**\) </td><td> Enable to view the debugging information related to continuous authentication. </td></tr><tr><td colspan="2"> **High Assurance** </td></tr><tr><td> High Assurance session length \(**glide.zta.high\_assurance.session.timeout**\) </td><td> Specify the high assurance session length, after which the end-users should re-authenticate. Default: 10 mins.**Note:** The value must be between 1 and 480. </td></tr><tr><td> Default high-assurance session length upon login \(**glide.zta.default.high\_assurance.session.lifespan**\) </td><td> Specify the duration in minutes for the default high-assurance session length upon user login. Default value: 5 minutes.**Note:** The property is only applicable for local login. </td></tr><tr><td> Configure end-user display message \(**glide.zta.high\_assurance.session.message**\) </td><td> Specify the message that is displayed to the end-user for re-authentication. Default message: `One or more resources require additional authentication due to a policy created by your administrator`. </td></tr><tr><td> Total times failed authentication before user account lock-out \(**glide.zta.high\_assurance.session.max.login.failed\_attempts**\) </td><td> Set the maximum failed authentication attempts before the users are logged out.**Note:** The value must be between 3 and 10. </td></tr><tr><td colspan="2"> **Audit properties** </td></tr><tr><td> Total no of days to keep audit records \(**glide.zta.continuous\_authentication.audit.lifespan**\) </td><td> Specify the number of days to save the audit records for CA.**Note:** The value must be between 1 and 180. </td></tr><tr><td> Total no. of days after which policies will be deleted after deactivated \(**glide.zta.continuous\_authentication.policy.lifespan**\) </td><td> Specify the no of days after which the CA policies are deleted. </td></tr></tbody> </table>**Important:** - By default, high-assurance sessions are not required for mobile app sessions, even when a continuous authentication policy is active on source. To change this behavior and block access from mobile app sessions, update the **glide.zta.high\_assurance.mobile.session.allowed** property value to `false`. - The sys\_properties, sys\_continuous\_auth\_policy, and sys\_user tables are excluded for CA and cannot be added to the CA policy configuration. **Related topics** [Exploring Continuous Authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/explore-continuous-auth.md) [Continuous authentication policies](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/ca-policies.md) [Continuous authentication metrics](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/ca-metrics.md) [Pre-work for Continuous Authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/pre-work-ca.md)
| title | Continuous authentication system properties |
| description | Use system properties to enable and customize continuous authentication \(CA\) to meet your zero trust access security requirements. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/platform-security/ca-system-properties.html |
| release | brazil |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | Exploring CAContinuous Authentication \(CA\)Zero Trust AccessAccess Management |