---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enforce SOAP request strict security \[Updated in Security Center 1.3\]

# Enforce SOAP request strict security \[Updated in Security Center 1.3\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Use the glide.soap.strict_security property to enforces web
service security.
This property uses a combination of:

* Basic authentication challenge/response over the HTTP protocol and
* System level access controls in the [Enable security jump start plugin (ACL Rules) \[Updated in Security Center 1.3\]](dWj7MUWRoB8IdYRmBcLCeg "Activate the Security Jump Start (ACL Rules) (com.snc.system_securitycom.snc.system_security) plugin to create several important ACLs that validate the Access Controls on some of the key system tables within the ServiceNow AI Platform.").
{#sc-soap-request-strict-security__ul_bxx_yxy_qlb} If you set this property to true, it performs the following actions:

* If the user has appropriate role to perform the operation, it checks incoming SOAP request for role authorization to validate. It occurs during SOAP web service calls/requests made against ServiceNow AI Platform tables when performing CREATE, READ, UPDATE or DELETE operations.
* Checks the system-level ACLs while retrieving data in the form of SOAP data on the table.
* Checks the field-level ACLs for any CRUD operation performed against a field of table.

{#sc-soap-request-strict-security__ul_szb_1rk_jkb}

ACL checks are only complete for standard Table API calls and not web
services.

## More information {#sc-soap-request-strict-security__section_more_information}

{#sc-soap-request-strict-security__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Property name | glide.soap.strict_security |
| Configuration type | System Properties (/sys_properties_list.do) |
| Category | [Access control](https://servicenow-prod.fluidtopics.net/xAmazkRh5FKyeb7q4TQGWw "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Default value | true |
| Recommended value | true |
| Functional impact | This remediation enforces the system-level access control while retrieving data from tables/pages in the form of SOAP data on the instance. If there are users currently accessing this data, they are restricted/allowed to access the data based on the ACL rules. For the default roles that have access to the SOAP data, see [SOAP web service](https://www.servicenow.com/docs/access?context=c_SOAPWebService&version=australia&pubname=australia-api-reference&ft:locale=en-US). |
| Security risk | (Moderate) Without appropriate authorization configured on the incoming SOAP requests, an unauthorized user can get access to sensitive content/data on the target instance. |
| References | [Enforce strict security for inbound SOAP](https://www.servicenow.com/docs/access?context=t_EnforceStrictSecurityWebSvcConns&version=australia&pubname=australia-api-reference&ft:locale=en-US) [SOAP web service](https://www.servicenow.com/docs/access?context=c_SOAPWebService&version=australia&pubname=australia-api-reference&ft:locale=en-US) |
[ ]

{#sc-soap-request-strict-security__table_ajc_b43_3kb}

To learn more about adding or creating a system property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).