Authentication

ServiceNow authentication validates the identity of a user who accesses an instance, and then authorizes the user to features that match the user's role or job function.

Available authentication methods

You can use several different methods to authenticate users. User credentials are matched to different saved credentials for each method.

Note: The OKTA SSO plugin has been deprecated.

Note: To learn more about the security properties that affect authorization processing, see Access control Access control in Instance Security Hardening Settings.


Authentication methods	Description
Local database	Username and password in their user record in the instance database.
External Single Sign-on (SSO)	Username and password configured in identity providers, which have a matching user account in the database.
LDAP	Username and password in their LDAP account, which has a matching user account in the database.
OAuth 2.0	Username and password of OAuth identity provider, which has a matching user account in the database.
Digest Token	Encrypted digest of the username and password in the user record.
Multifactor	Username and password in the database and a passcode sent to the user's mobile device that has Google Authenticator installed.

Note: You can use SAML and Digest Authentication through the Multiple Provider SSO application.

Authentication

ServiceNow authentication validates the identity of a user who accesses an instance, and then authorizes the user to features that match the user's role or job function.

Available authentication methods

You can use several different methods to authenticate users. User credentials are matched to different saved credentials for each method.

Note: The OKTA SSO plugin has been deprecated.

Note: To learn more about the security properties that affect authorization processing, see Access control Access control in Instance Security Hardening Settings.


Authentication methods	Description
Local database	Username and password in their user record in the instance database.
External Single Sign-on (SSO)	Username and password configured in identity providers, which have a matching user account in the database.
LDAP	Username and password in their LDAP account, which has a matching user account in the database.
OAuth 2.0	Username and password of OAuth identity provider, which has a matching user account in the database.
Digest Token	Encrypted digest of the username and password in the user record.
Multifactor	Username and password in the database and a passcode sent to the user's mobile device that has Google Authenticator installed.

Note: You can use SAML and Digest Authentication through the Multiple Provider SSO application.

How search works:

Topics are ranked in search results by how closely they match your search terms

Authentication

Authentication

Available authentication methods

On this page

Authentication

Authentication

Available authentication methods

Log in to personalize your search results and subscribe to topics