---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enforce oauth state parameter validation

# Enforce oauth state parameter validation {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Configure the glide.oauth.state.parameter.required property to prevent your instance from cross-site
request forgery (CSRF) attacks.
The glide.oauth.state.parameter.required property enables the State parameter to be required in an OAuth request for authorization code flow. The State parameter is a string value that should not contain
special characters or be empty. Setting this property to true ensures that an attacker cannot perform Cross-site request forgery (CSRF) attacks during authentication, which protects your instance from attacks
from an impersonated user.

## More information {#sc-enforce-oauth-state-parameter-validation__section_ghv_dvg_1xb}

{#sc-enforce-oauth-state-parameter-validation__table_hhv_dvg_1xb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.oauth.state.parameter.required |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Category | [Access control](https://servicenow-prod.fluidtopics.net/xAmazkRh5FKyeb7q4TQGWw "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 4.2 * CVSS score: Medium * Security risk details: Set this property to true to ensure that CSRF attacks are prevented. {#sc-enforce-oauth-state-parameter-validation__ul_ihv_dvg_1xb} |
| Dependencies and prerequisites | None |
[ ]

{#sc-enforce-oauth-state-parameter-validation__table_hhv_dvg_1xb}