To support your organization's authentication policies, admins can control which mobile apps can log in to ServiceNow instances.

To control which mobile apps can log in to ServiceNow instances, admins can choose either basic app allowance lists or advanced app allowance. The advanced allowance mode enables admins to add links to authorized apps. These two modes are described in the following sections.
Important:
  • The basic and the advanced app allowance modes should not both be configured on the same instance. If you configure both modes on the same instance, the system always prioritizes the advanced mode configuration over the basic mode configuration.
  • This feature is available on both on-premises and cloud instances.

Basic app allowance lists

By configuring a system property, admins can create a list of mobile apps that can connect to ServiceNow instances. If a user tries to connect to an instance with an app that isn't on the list, the user receives an Unable to log in … message as shown in the following image.
Figure 1. Failed login by an unauthorized app

Mobile app login screen that shows the "Unable to log in" message.

Advanced app allowance with links to permitted apps

Using Scripted Extension Points, admins can create a list of apps that can log in to ServiceNow instances. Admins can change the Dismiss link text to route the user to the appropriate mobile app. Using the link, end users can connect to an instance with an authorized mobile app.