---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Tutorial: Configure CA for a Data Class

# Tutorial: Configure Continuous Authentication for a Data Class {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 Minuten Lesedauer

Procedure that describes end to end configuration of continuous authentication policy for a data class and the impacts to the users due to the configuration changes.

## Vorbereitungen

* Role required: ca_admin  
  Hinweis:  
  You must elevate your role to ca_admin.
* You must install the Zero Trust - Continuous Authentication (`com.snc.zero_trust_continuous_authentication`) for opting CA which requires a license.
* Enable the Continuous Authentication (glide.zta.continuous_authentication.enabled) system property. For more information, see [System properties](https://servicenow-prod.fluidtopics.net/7bzhP4pMMVzuQn_VzkqCgQ "Use system properties to enable and customize continuous authentication (CA) to meet your zero trust access security requirements.").
* Activate the Integration - Multiple Provider Single Sign-On Installer (com.snc.integration.sso.multi.installer) plugin.
* Understand the pre-work that is required before configuring CA for the instance. For more information, see [Pre-work for Continuous Authentication](https://servicenow-prod.fluidtopics.net/fRWAJJwkvHoeR8vYcd7Onw "Ensure to perform the following pre-work before using Continuous Authentication (CA).").
{#configure-ca-tutorial__ul_hks_qnw_ycc}

## Prozedur

1. Navigate to AllContinuous Authentication.
2. Select Policies tab.
3. Select New.
4. On the form, fill the fields:  
   {#configure-ca-tutorial__table_cvy_xnw_ycc__entry__2}

   | Field | Description |
   |-|-|
   | Policy Name | Name of the policy |
   | Description | Generic description to the policy |
   | Select the resources | Select the Data Class. You can create data class and use it for CA policy configuration. Hinweis: To know more about how to create data class, see [Data Classification](https://servicenow-prod.fluidtopics.net/lTzMDApKb~I4lO2wqMzTBA "Group data by type, using pre-defined or user-defined data classifications. If you have an assigned data classification administrator or auditor role, you can administer different data classes or visually analyze the current state of different types of data within the instance."). |
   [Tabelle : 1. Continuous Authentication]

   {#configure-ca-tutorial__table_cvy_xnw_ycc}  
   Hinweis:  
   You can use either of the login methods for the CA policy:
   * SSO based login: Specify the fields in the Continuous Authentication tab within the Identity Provider record and the set the Identity Provider record as Active.

     To know more about Identity Providers configuration, see [OIDC](https://servicenow-prod.fluidtopics.net/9_75b306SdVFue_uCTQrjg "Create or update an OpenID Connect (OIDC) configuration by using the Multi-Provider SSO plugin.") and [SAML](https://servicenow-prod.fluidtopics.net/~h6~oew8QuXfIxSfwUV3Vw "You can create or update a SAML 2.0 SSO configuration from the Multi-Provider SSO feature.").
   * Non-SSO based login: By default, if there are no Identity Provider with Continuous Authentication configuration, Multi-factor Authentication (MFA) is used as a login method. Make sure the MFA properties are Active and configured based on your requirement. To know more about MFA properties, see [Multi-factor Authentication system properties](https://servicenow-prod.fluidtopics.net/t9SgpdqdLvtj_Rkhwu01iw "Use system properties to enable and customize MFA to meet your security requirements.").
   {#configure-ca-tutorial__ul_ctv_ldx_ydc}
5. Select Save \& Activate.
{#configure-ca-tutorial__steps_y2r_tvv_4dc}

## Ergebnisse

Based on the details provided for the configuration, CA policy is created with Access Control List (ACLs) for the selected table or data class. You can view the details of the ACLs that are created by
selecting the View ACLs on the policy page.

The CA policy created, prompts the user for authentication to data class (in this case data class set for the table Account Recovery) that you've protected using the policy. The users can select
Authenticate option.

Perform the authentication based on the following:

* User who had performed local login to log in to the instance, is displayed with platform MFA for step-up authentication.  

* User who had performed SSO login (OIDC or SAML) to log in to the instance is displayed with the SSO for re-authentication.  

{#configure-ca-tutorial__ul_tny_rpx_4dc}

After successful authentication the table with the data class is displayed.

An high assurance session is now established for the user. High assurance session is limited to the High Assurance session length (glide.zta.high_assurance.session.timeout) system property. If the
high assurance session time exceeds the property length, the user is prompted for re-authentication or step up authentication.
**Zugehörige Konzepte**   

* [High Assurance session with Continuous Authentication](https://servicenow-prod.fluidtopics.net/rrjKauZwJsx44r5CwE0YLA "Establish high assurance session for with ServiceNow's continuous authentication.")
* [Exploring Continuous Authentication](https://servicenow-prod.fluidtopics.net/fMbsn97SSru4LU1WEADEzw "ServiceNow's continuous authentication (CA) enables you to re-verify and authenticate a user if they access resources that are protected by you.")  
**Zugehörige Tasks**   

* [Configuring Continuous Authentication](https://servicenow-prod.fluidtopics.net/vxILJeY6MlUQ2JYcUouTNA "Configure continuous authentication (CA) policies to re-authenticate the users if there's an attempt to access resources that are protected by you.")