Password Reset and Password Change applications The Password Reset application allows end users to use a self-service process to reset their own passwords on the local ServiceNow instance. Alternatively, your organization can implement a process that requires service-desk personnel to reset passwords for end users. Password Change applicationThe Password Change application extends the Password Reset application by letting admins define how users change their passwords. Types of process for Password Reset Self-service process: Users reset their password over the Internet using a browser. The self-service process is supported on all supported interfaces, including mobile devices. Service-desk password reset process: Users reset their passwords with the assistance of a service-desk employee, over the phone or in person. Watch the video: Introducing Password Reset (Video). Elements of a password reset processUsers with the password_reset_admin role can configure one or more password reset processes to connect the user names and passwords of a group of people with: A credential store where user credentials (like username/password) are securely stored One or more verifications that the admin specifies. For example, answering a personal question that only the user knows how to answer or responding to the system with a code number that is sent to a pre-authorized SMS device like a cellular phone or tablet. . Figure 1. Password reset process Implementing a password reset process Plan to ensure that all applicable organizational guidelines, security policies, and areas of the organization are considered. Set up the password reset and password change processes according to the plan. In the service-desk model, service-desk employees monitor and reset passwords as needed. Monitor password reset activity to identify security threats and to ensure compliance with the organization's password policy requirements. Password Reset Orchestration Add-onYou can also subscribe to the Password Reset Orchestration Add-on plugin (com.glideapp.password_reset.addon.orchestration), which provides the ability to reset passwords on Active Directory and other credential stores. Orchestration is available as a separate subscription. Password Change applicationThe Password Change application extends the Password Reset application by letting admins define how users change their passwords. Only a self-service process is supported and an admin must publish the URL to the password change form.Activate and configure the Password Reset applicationPassword Reset is available as a separate subscription from the rest of the ServiceNow platform and requires the Password Reset plugin. The plugin activates related plugins if they are not already active and includes example verifications. For more information, contact your ServiceNow account representative.Plan your Password Reset strategyTo ensure security and efficiency, take the time to plan your Password Reset implementation.Configure your Password Reset or Password Change processTo implement the process, you configure credentials, verifications, and users.Service desk processes: Resetting passwordsThe specific details of the password reset process vary depending on the verification type and settings you have chosen. Also, depending on your organization's password reset requirements, users can reset their passwords through a publicly accessible web page, or service desk employees with the password_reset_service_desk role can perform password resets on behalf of users.Monitoring Password Reset and Password Change activityThe Password Reset application provides a number of tools for monitoring and troubleshooting password reset activities.Users: Reset your password on Windows systemsIf your organization has configured the ServiceNow Password Reset Windows Application, you can reset your password directly from your Windows login screen.Users: Enroll in the password reset programSome organizations auto-enroll users in a password reset program. Your organization may offer you the option to enroll for one or more methods of verifying your identity while you are resetting your password.