Two script actions are available that enable a site administrator to manage the number of times a user can provide an incorrect password before being locked out from the ServiceNow AI Platform. You can enable either of these script actions to manage failed login attempts.

More information

AttributeDescription
Property/Plugin Name N/A
Configuration type System Policy > Script Actions
Category Authentication
Purpose To enforce strict policy for failed login attempts to avoid brute forcing of credentials.
Recommended value Active
Security risk rating 7.3
Functional ImpactThis remediation would enable administrator of the instance to monitor and report any malicious user access. No functionality impact, only User experience change.
Security risk (Moderate) Apply a defined logging and auditing strategy so that you can identify and act on suspicious activity in a timely manner.

Steps to configure

  1. Navigate to System Policy > Script Actions.
  2. Search for the name *SNC User.
  3. To enable management of failed login attempts, change the Active state of either the SNC User Lockout Check with Auto Unlock or SNC User Lockout Check scripts actions from false to true.
  4. To reset the failed login counter after a successful login, you can activate the SNC User Clear script action.