--- sourceDocument: Australia ServiceNow AI Platform Capabilities sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/servicenow-platform Release : - australia ft:locale : - de-DE ft:publication_title : - Australia ServiceNow AI Platform Capabilities ft:clusterId : - platcap bundleId : - platcap workflow : - Platform --- # Credential stores for Password Reset # Credential stores for Password Reset {#ariaid-title1} * Freigeben Version: Australia * * Aktualisiert 12. März 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer Credential stores hold user information such as user names and passwords that can be used as login credentials. Examples include the User table \[sys_user\] or an Active Directory server. Users with the password_reset_admin or password_reset_credential_manager role can create and modify connections to credential stores. ## Credential store types installed with the base system {#c_CredentialStores__section_ink_tw2_g1b} A credential store type is a set of workflows that specify how to connect to a credential store. Navigate to Password ResetCredential Store Types to view the list of example credential stores that are based on the base-system types. The base system includes the following credential store types: {#c_CredentialStores__table_sdb_jjp_kq__entry__2} | Name | Description | |-|-| | Local ServiceNow Instance | Represents the current (local) ServiceNow instance. | [ ] {#c_CredentialStores__table_sdb_jjp_kq} ## Credential store types included in Store apps {#c_CredentialStores__section_ibr_cxy_bsb} {#c_CredentialStores__table_mx5_cxy_bsb__entry__2} | Name | Description | |-|-| | Microsoft AD Credential Store | Represents a Microsoft Active Directory credential store. See [Set up Microsoft Active Directory for Password Reset](https://servicenow-prod.fluidtopics.net/UJFClEPfSQbkUDRVp0cuJA#setup-guide-ad "Enable connections to Active Directory (AD) by activating the Password Reset Windows App and Microsoft AD for Password Reset available in the ServiceNow Store."). | | Microsoft Entra ID Credential Store | Represents a Microsoft Entra ID credential store. | | Okta credential store | Represents an Okta credential store. | | Google credential store | Represents a Google Directory credential store. | [ ] {#c_CredentialStores__table_mx5_cxy_bsb} ## Connection subflows for credential store types {#c_CredentialStores__section_xhc_pfz_f1b} A credential store type workflow requires a subflow that defines how to connect to the store, and can include an optional subflow that defines how to test the connection. Use the Pwd reset -- AD and Pwd Reset - Local subflows as models for your custom connection workflows. Abbildung : 1. Pwd Reset Local sub workflow Abbildung : 2. Pwd connection test local SN sub workflow ## Creating a custom credential store type {#c_CredentialStores__section_g1z_2w3_vbb} You can use a credential store type as a model to create a custom type. See [Create a credential store type for Password Reset](https://servicenow-prod.fluidtopics.net/9E5m96vOjO_Q~jWIlXEUlQ "Create a custom credential store type when the base-system types do not meet your needs."). * **[Configure the connection to a credential store for the Password Reset processes](https://servicenow-prod.fluidtopics.net/2FK1Y_gXVPy91vKmvWP7aw)** You create a Password Reset credential store record to configure access to your credential store server while a user is changing or resetting a password. In addition to host connection information, you can specify the password hints that users should see, restrictions on password reuse, the allowed number of failed reset attempts, and other settings. * **[Credentials Store for Password Reset for Active Directory](https://servicenow-prod.fluidtopics.net/xsBEhxpPxHSCLeKYPPfzHQ)** A credential store type is a set of workflows that specify how to connect to a credential store. You can connect to Password Reset Credential Stores to view the list of example credential stores that are based on the base-system types. * **[Credential Store for Password Reset for Microsoft Entra ID](https://servicenow-prod.fluidtopics.net/AvywPdey4sv1DsH4Ib_v8g)** A credential store type is the set of flows to manage password and account of Microsoft Entra ID user. Navigate to Password ResetCredential Stores to view the list of example credential stores that are based on the base-system types. * **[Test the connection to a credential store](https://servicenow-prod.fluidtopics.net/BvLjt5WHXRQ7RTlltRj3mQ)** You should test the connection to a credential store after you configure a new credential store or when users experience problems that might involve the connection. * **[Delete a connection to a credential store for Password Reset](https://servicenow-prod.fluidtopics.net/FhnF9Y1DMuv4vZmvEGqH3g)** Important: Before you delete the connection to a credential store, check all Password Reset processes to ensure that the credential store is not in use. If the credential store is being used by a process, update the process before deleting the credential store. **Zugehörige Konzepte** * [Password Reset verifications](https://servicenow-prod.fluidtopics.net/Ls9L600FUEsllC0JKG9f~A "Each verification specifies the method and process for verifying the identity of the user that is requesting a password reset.") **Zugehörige Tasks** * [Configure password expiration reminder](https://servicenow-prod.fluidtopics.net/chxAPKC4Uksqp68fFhFLZA "You can configure the password reset expiration reminder feature to send notifications to change or reset a user’s password whenever it is going to expire.") * [Configure your Password Reset process to auto-enroll users](https://servicenow-prod.fluidtopics.net/Z~cxlh~ruTRQpfFuOJNH5A "To simplify management, many organizations auto-enroll users in the Password Reset program. Every base-system verification type enables you to specify automatic enrollment for your process.") * [Enable users to enroll for Password Reset](https://servicenow-prod.fluidtopics.net/dnwp9Ma0rsxh5WVALutJog "To enable users to enroll for the Password Reset program, you specify a UI macro that takes the user through the enrollment process and a script that processes the enrollment data that the user entered. The base system includes a functioning macro and script.") * [Configure Password Reset properties](https://servicenow-prod.fluidtopics.net/83Dm8_sAgBsNGGfj0zy_Hg "You can specify properties that configure the Password Reset experience for end users.") * [Send email to remind users to enroll for Password Reset](https://servicenow-prod.fluidtopics.net/cykyfREDKuW0IXYrR~jnpQ "You can automatically send messages that remind users to enrolled in the Password Reset process. You specify the text of the message and can configure the messages to repeat at intervals.") * [Configure the required strength for passwords](https://servicenow-prod.fluidtopics.net/XtiMlgZjAHEv53bOFq2OMQ "The password that a user defines must meet certain requirements — for example, it must contain at least 12 characters, it must include a numeral, and so on. You can configure the requirements as needed for your organization.") * [Specify lockout for failed login attempts](https://servicenow-prod.fluidtopics.net/WpU57WqqH17b8bPvrG6uZQ "The system provides inactive script actions that enable you to specify the number of failed login attempts before a user account is locked and to reset the count after a successful login.") * [Configure Google reCAPTCHA for the password reset process](https://servicenow-prod.fluidtopics.net/fqOKwynU1VtjcxajD5khCQ "To use the Google reCAPTCHA service, instances that are running on a domain other than service-now.com require an API key pair from Google.") **Zugehörige Verweise** * [Calculating the security score for password reset process](https://servicenow-prod.fluidtopics.net/jKGLm3TaUrVM2S7QeAD6tQ "The security score of the password reset process is a critical metric for the password reset administrators to assess the strength and configuration of the password reset process.")