--- sourceDocument: Australia Mobile Configuration and Navigation sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/mobile Release : - australia ft:locale : - en-US ft:publication_title : - Australia Mobile Configuration and Navigation ft:clusterId : - mobile bundleId : - mobile workflow : - Development, Data and Analytics --- # Security controls # Security controls {#ariaid-title1} * Release version: Australia * * Updated March 12, 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Security controls This document outlines how to configure security controls within ServiceNow to enhance mobile application security. Key functionalities include restricting copy/paste actions, requiring a PIN for app access, blocking attachments on mobile devices, and more. Show full answer Show less ## Key Features * **Restrict Copy/Paste:** Utilize the `glide.sg.clearpasteboardwhenbackground` property to clear the clipboard when the app goes into the background. * **Require App PIN:** Enforce a six-digit PIN for mobile sign-ins or after five minutes of inactivity using `glide.sg.requiremobileapplicationpin`. * **Disable Attachments:** Employ an Access Control List (ACL) to block attachment access from mobile devices using the `isMobile` method. * **Enable Blur App Option:** Use `glide.sg.bluruiwhenbackgrounded` to blur the app when not in focus, enhancing privacy on both iOS and Android devices. * **Block Rooted/Jailbroken Devices:** Prevent login from rooted or jailbroken devices by configuring `glide.sg.allowrootedjailbrokendevices`. * **Penetration Testing:** ServiceNow conducts annual penetration testing of its mobile app, with results available to customers. ## Key Outcomes By implementing these security controls, ServiceNow customers can significantly improve the security of their mobile applications, protect sensitive data, and ensure compliance with organizational policies. Customers can also leverage penetration testing results to identify and mitigate vulnerabilities in their instances. Configure security controls to restrict copy/paste, enforce PIN, or block attachment functionality. ## Restrict copy/paste {#sg-mobile-security-controls__section_kd4_1zz_ddb} Copy/paste restrictions are defined in the system properties \[sys_properties\] table. There are two applicable security properties. glide.sg.clear_pasteboard_when_background: Clears the copy/paste clipboard when a ServiceNow app enters the background. For more information on clearing the clipboard, see [Configure clear clipboard](https://servicenow-prod.fluidtopics.net/mGQ8jsuPBCJdSJ1Hftem~A "Several system properties are available for you to further configure the mobile app. For example, use system properties to require a PIN, hide the image on the app homepage, configure the blur in background option, or disable sharing attachments from the mobile app."). ## Require an app PIN {#sg-mobile-security-controls__section_wxx_yzz_ddb} Require users to enter a six digit PIN each time they sign in from their mobile device, or when an app has been inactive for five minutes. Requiring an app PIN is controlled by the glide.sg.require_mobile_application_pin system property. For more information on requiring an app PIN, see [Require an app PIN](https://servicenow-prod.fluidtopics.net/mGQ8jsuPBCJdSJ1Hftem~A "Several system properties are available for you to further configure the mobile app. For example, use system properties to require a PIN, hide the image on the app homepage, configure the blur in background option, or disable sharing attachments from the mobile app."). ## Disabling attachments on a mobile device {#sg-mobile-security-controls__section_gvq_f11_2db} Use an ACL to block specific access on mobile. Use the [isMobile](https://developer.servicenow.com/app.do#!/api_doc?v=kingston&id=r_ScopedGS-isMobile) method to check if a request comes from a mobile device. For example, you could add an ACL for the attachment \[sys_attachment\] table where the read and write scripted ACLs includes the following check. You can also add this code to any existing ACLs you have for the attachment table. If have multiple attachment ACLs, all of the need to have Admin override option unchecked. if( gs.isMobile() ){ answer = false; } Note: You need elevated privileges to create ACLs. ## Enable the blur app option {#sg-mobile-security-controls__section_xwb_n1t_dhb} Blur a mobile app when not in focus on a mobile device using the following system property in the system properties \[sys_properties\] table. glide.sg.blur_ui_when_backgrounded Important: * The glide.sg.blur_ui_when_backgrounded system property is supported on both iOS and Android devices. * By default, the value for this property is set to false, which turns it off. * For Android devices, when this property is enabled by setting the value to true, the following restrictions apply: * The screen share feature isn't supported and the shared app screen appears black. * Users are prevented from taking screenshots. {#sg-mobile-security-controls__ul_zgh_qwd_dwb} These restrictions don't apply to iOS devices when the glide.sg.blur_ui_when_backgrounded property is enabled. {#sg-mobile-security-controls__ul_d2s_y3d_dwb} For more information, see [Configure the blur app option](https://servicenow-prod.fluidtopics.net/mGQ8jsuPBCJdSJ1Hftem~A "Several system properties are available for you to further configure the mobile app. For example, use system properties to require a PIN, hide the image on the app homepage, configure the blur in background option, or disable sharing attachments from the mobile app.") ## Block rooted and jailbroken devices {#sg-mobile-security-controls__section_as5_5hd_5qb} To improve security on your mobile device, block the logging in of mobile apps when a rooted or jailbroken device is used. Use the following security property: glide.sg.allow_rooted_jailbroken_devices system For more information, see [Configure the status for rooted and jailbroken devices](https://servicenow-prod.fluidtopics.net/yR48gPhz6IlIRUmrbECTHg "Define whether jailbroken (iOS) and rooted (Android) devices are permitted on your mobile device. The default value is set to false to increase security and to minimize possible disruption to your system."). ## Penetration testing {#sg-mobile-security-controls__section_adj_vnz_cgb} ServiceNow engages a third party to perform penetration testing of a mobile app. This typically happens annually but sometimes occurs more frequently. The results of these tests are available to customers on CORE. Customers can test the mobile application in conjunction with a pen test of their instance per the process outlined in [KB0538598](https://support.servicenow.com/kb_view.do?sysparm_article=KB0538598).