Prevent inactive users from logging in

reference brazil Updated Sep 10, 2026 1 min read sc-prevent-inactive-users-from-logging-in.md
Raw file servicenow.com

Configure this property to control if inactive users can authenticate on your instance.

When the glide.authenticate.only.allow.active.user.login system property is not set to true, users in the User [sys_user] table marked inactive can still login to the instance. Users may be marked inactive if they no longer have permission to login (such as during termination from a company).

Set the glide.authenticate.only.allow.active.user.login property value to the recommended value of true (recommended), to ensures the users in the User [sys_user] table marked inactive can't log in to the instance and are locked out.

More information

Attribute

Description

Configuration name

glide.authenticate.only.allow.active.user.login

Configuration type

System Properties (/sys_properties_list.do)

Data type

Boolean

Recommended value

true

Default value

true

Category

Access control

Security risk

  • Severity score: 7.5
  • CVSS score: High
  • Security risk details: Inactive users may still access the instance and any data they could previously access.

Dependencies and prerequisites

None

**Parent Topic:**[Access control](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-access-control.md)
Search documentation
Search document titles and file paths on the brazil branch