Key Features

• Enable/Disable MFA: Administrators can enable or disable MFA globally through a system property, allowing flexible control over user authentication requirements.
• Bypass Setup Limit: Users can be allowed to bypass setting up MFA a configurable number of times, enabling login access even if they do not have their secondary device temporarily. This bypass count resets if the feature is disabled and then re-enabled.
• One-Time Code Validity: The validity period for the one-time code sent to users’ email addresses is configurable in minutes, helping balance security and user convenience.
• Clock Skew Adjustment: The system can accommodate slight time differences between the server and user devices by allowing a configurable time window (up to 60 seconds) during which generated codes remain valid, reducing login issues caused by timing discrepancies.
• Role-Based MFA Enforcement: Administrators can specify roles, such as sncustomerservice.customer, that require MFA, enabling targeted enforcement based on user groups or responsibilities.

Practical Implications for ServiceNow Customers

By implementing MFA for Business Portal users, organizations can significantly increase the security of self-service access, reducing the risk of unauthorized entry. The configurable properties provide flexibility to tailor MFA behavior to organizational policies and user convenience, such as allowing limited bypasses and adjusting code validity windows.

Configuring role-based MFA ensures that critical user groups are required to use this enhanced security measure, while others may have different authentication requirements. This targeted approach helps optimize security without unnecessarily complicating access for all users.

Overall, enabling and configuring MFA through these properties helps ServiceNow customers protect sensitive portal access, comply with security standards, and provide a smoother authentication experience.