Prevent inactive users from logging in
Configure this property to control if inactive users can authenticate on your instance.
When the glide.authenticate.only.allow.active.user.login system property is not set to true, users in the User [sys_user] table marked inactive can still login to the instance. Users may be marked inactive if they no longer have permission to login (such as during termination from a company).
Set the glide.authenticate.only.allow.active.user.login property value to the recommended value of true (recommended), to ensures the users in the User [sys_user] table marked inactive can't log in to the instance and are locked out.
More information
|
Attribute |
Description |
|---|---|
|
Configuration name |
glide.authenticate.only.allow.active.user.login |
|
Configuration type |
System Properties (/sys_properties_list.do) |
|
Data type |
Boolean |
|
Recommended value |
true |
|
Default value |
true |
|
Category | |
|
Security risk |
|
|
Dependencies and prerequisites |
None |
--- title: Prevent inactive users from logging in description: Configure this property to control if inactive users can authenticate on your instance. locale: en-US canonical_url: https://www.servicenow.com/docs/r/platform-security/instance-security-hardening-settings/sc-prevent-inactive-users-from-logging-in.html release: brazil product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: reference last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [Access control, Hardening settings, Platform Security] --- # Prevent inactive users from logging in Configure this property to control if inactive users can authenticate on your instance. When the **glide.authenticate.only.allow.active.user.login** system property is not set to **true**, users in the User \[sys\_user\] table marked inactive can still login to the instance. Users may be marked inactive if they no longer have permission to login \(such as during termination from a company\). Set the **glide.authenticate.only.allow.active.user.login** property value to the recommended value of **true** \(recommended\), to ensures the users in the User \[sys\_user\] table marked inactive can't log in to the instance and are locked out. ## More information <table id="table_ajc_b43_3kb"><thead><tr><th> Attribute </th><th> Description </th></tr></thead><tbody><tr><td> Configuration name </td><td> **glide.authenticate.only.allow.active.user.login** </td></tr><tr><td> Configuration type </td><td> System Properties \(/sys\_properties\_list.do\) </td></tr><tr><td> Data type </td><td> Boolean </td></tr><tr><td> Recommended value </td><td> true </td></tr><tr><td> Default value </td><td> true </td></tr><tr><td> Category </td><td> [Access control](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-access-control.md) </td></tr><tr><td> Security risk </td><td> - Severity score: 7.5 - CVSS score: High - Security risk details: Inactive users may still access the instance and any data they could previously access. </td></tr><tr><td> Dependencies and prerequisites </td><td> None </td></tr></tbody> </table>**Parent Topic:**[Access control](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-access-control.md)
| title | Prevent inactive users from logging in |
| description | Configure this property to control if inactive users can authenticate on your instance. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/platform-security/instance-security-hardening-settings/sc-prevent-inactive-users-from-logging-in.html |
| release | brazil |
| product | Instance Security Hardening Settings |
| classification | instance-security-hardening-settings |
| topic_type | reference |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | Access controlHardening settingsPlatform Security |