---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# API and web service

# API and web service {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

The API and Web Service category ensures that applications have appropriate
authentication, authorization and session management, validate all input that traverses a trust
boundary and include security controls for all API types.
Specific controls in this category address input validation by service type such as XDS schema validation for SOAP web services or Denial of Service protection for graphQL APIs.
* **[Validate SOAP content type \[Updated in Security Center 1.3\]](kvlgHns64MB_rmKOA3gB9Q)**   
  Use the glide.soap.require_content_type_xml property to enable validation of a content type as text/xml and protect against invalid SOAP requests.
* **[Prevent OAuth Clients from Using Implicit Grant](https://servicenow-prod.fluidtopics.net/3GMahWYrYHK~sgJYKHqxpA)**   
  Use a system property to avoid the use of the implicit grant type.
* **[Require authorization for pdf requests \[Updated in Security Center 1.3\]](nzwf7_ZopCaZ1KKLOPH1jA)**   
  Use the glide.basicauth.required.pdf property to designate if incoming PDF requests should require basic authentication.
* **[Require Authentication on Event Management HTTP Processor \[New in Security Center 1.3, Updated in 1.5, and removed in 2.0\]](6aFlhMdJ9jzxo2HWuegF1g)**   
  Learn how to establish secure basic authentication for inbound Amazon Simple Notification Service (SNS) requests when the Event Management plugin (com.glideapp.itom.snac) is enabled.
* **[Require authorization for SOAP requests \[Updated in Security Center 1.3, 1.5, and 2.0\]](t_mcjJQajIo2aGOVbVFggw)**   
  Use the glide.basicauth.required.soap property to designate if incoming SOAP requests should require basic authorization.
* **[Require authorization for unload requests \[Updated in Security Center 1.3\]](Zr8jrwe0M5iAPYLf3yqJcg)**   
  Use the glide.basicauth.required.unl (useUnloadFormat) property to designate if incoming unload requests should require basic authentication.
* **[Require authorization for csv requests \[Updated in Security Center 1.3\]](sVBhgMAKE3nCmRJnW4YmiA)**   
  Use the glide.basicauth.required.csv property to designate if incoming CSV (Comma-Separated Values) requests should require basic authentication.
* **[Require authorization for excel requests \[Updated in Security Center 1.3\]](SBr7kFj_F~Dqh6iI7k_5Rg)**   
  Use the glide.basicauth.required.excel property to designate if incoming Excel requests should require basic authentication.
* **[Require authorization for import requests \[Updated in Security Center 1.3\]](8r6YFDQ~nSdok_Ngae217Q)**   
  Use the glide.basicauth.required.importprocessor property to designate if incoming import requests should require basic authentication.
* **[Require authorization for JSONv2 request \[Updated in Security Center 1.3\]](lZsC_zHGd4GpzBz8ShqnwA)**   
  Use the glide.basicauth.required.jsonv2 property to designate if incoming JSONv2 requests should require basic authorization.
* **[Require authorization for WSDL request \[Updated in Security Center 1.3 and 1.5\]](itOjVYx8mR9UoHGUMf~fVg)**   
  Use the glide.basicauth.required.wsdl property to designate if incoming WSDL (Web Services Description Language) requests should require basic authentication.
* **[Require authorization for XML requests \[Updated in Security Center 1.3\]](ZUArV3mmBZG2eyN7hnCmpA)**   
  Use the glide.basicauth.required.xml property to designate if incoming XML requests should require basic authentication.
* **[Require authorization for XML output requests \[Updated in Security Center 1.3\]](uE1DfbziOPZme8AF7cBUEg)**   
  Configure this property so that basic authorization is required for all inbound XMLOutputProcessor requests.
* **[Require Authorization for XSD Requests \[Updated in Security Center 1.3\]](NPevOg6TKsI~xZ4SwILEog)**   
  Use the glide.basicauth.required.xsd property to designate if incoming XSD (XML Schema Definition) requests should require basic authentication.
* **[Require authorization for script requests \[Updated in Security Center 1.3\]](9hE1T51Q53k6CqqgSZbGxw)**   
  Use the glide.basicauth.required.scriptedprocessor property to designate if incoming script requests should require basic authentication.
* **[Require authorization for SCHEMA requests \[Updated in Security Center 1.3\]](fV_~_7YabNxDy3gPyuHkow)**   
  Use the glide.basicauth.required.schema property to require basic authorization for all Inbound Table Schema Processor requests.
* **[Require authorization for RSS requests \[Updated in Security Center 1.3\]](U2Ubev2I9SPx8ZoQeHkWjA)**   
  Use the glide.basicauth.required.rss property to designate if incoming RSS requests should require basic authentication.
* **[Require authorization for API requests \[Updated in Security Center 1.3\]](Bm2SSeu050fSAhH6DbShTw)**   
  Use the glide.basicauth.required.api property to enhance security for basic authorization for incoming REST requests.