---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Require Authentication on Event Management HTTP Processor \[New in Security Center 1.3, Updated in 1.5, and removed in 2.0\]

# Require Authentication on Event Management HTTP Processor \[New in Security Center 1.3,
Updated in 1.5, and removed in 2.0\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Learn how to establish secure basic authentication for inbound Amazon Simple Notification Service (SNS) requests when the Event Management plugin (com.glideapp.itom.snac) is enabled.
If the glide.basicauth.required.evtmgmthttpprocessor property isn't set to the recommended value of true, and the Event Management plugin (com.glideapp.itom.snac) is
active, then basic authentication is not required for all inbound Amazon Simple Notification Service (SNS) requests. This can lead to unauthenticated access to instance data.

To remediate this security risk, ensure that glide.basicauth.required.evtmgmthttpprocessor is set totrue and that com.glideapp.itom.snac is active.

## More information {#sc-require-authentication-on-event-management-http-processor__section_qhx_1b1_xwb}

{#sc-require-authentication-on-event-management-http-processor__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.basicauth.required.evtmgmthttpprocessor |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Category | [API and web service](https://servicenow-prod.fluidtopics.net/IQQn4Mcc1sDrMeZ8Xzt9tg "The API and Web Service category ensures that applications have appropriate authentication, authorization and session management, validate all input that traverses a trust boundary and include security controls for all API types.") |
| Security risk | * Severity score: 7 * CVSS score: High * Security risk details: Not settingglide.basicauth.required.evtmgmthttpprocessor to the recommended value of true, and not activating the com.glideapp.itom.snac plugin causes basic authentication not to be enabled for inbound SNS requests. This could lead to unauthenticated access to instance data. {#sc-require-authentication-on-event-management-http-processor__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| References | * <https://docs.aws.amazon.com/sns/latest/dg/welcome.html> * [Access control](https://www.servicenow.com/docs/access?context=access-control&version=australia&pubname=australia-now-intelligence&ft:locale=en-US) {#sc-require-authentication-on-event-management-http-processor__ul_cv4_5xz_hyb} |
| Functional impact | If glide.basicauth.required.evtmgmthttpprocessor is not set to the recommended value of True, and if the Event Management plugin (com.glideapp.itom.snac) is active, then basic authentication is not required for all Inbound Amazon Web Services SNS requests. This can lead to unauthenticated access to instance data. |
[ ]

{#sc-require-authentication-on-event-management-http-processor__table_ajc_b43_3kb}