Instance Security

What it does

This skill, Instance Security, focuses on enhancing security within ServiceNow environments. It provides capabilities for authentication, authorization, and overall security hardening through various layers including network security, session management, data protection, and auditing. Specifically, it covers aspects like Single Sign-On (SSO), Multi-Factor Authentication (MFA), Access Control Lists (ACLs), role management, and password policy enforcement.

When to use it

• Automating checks for strong passwords based on defined complexity rules.
• Verifying session validity and detecting potential session fixation attempts.
• Enforcing MFA requirements for users accessing sensitive operations within ServiceNow.
• Auditing security events and reviewing access controls.
• Managing user accounts, roles, and associated permissions.

Key capabilities

• Authentication: Supports SSO and MFA (ES5 only).
• Password Policy Enforcement: Checks password strength against configurable minimum length and complexity requirements (ES5 only).
• Session Management: Validates session age and detects potential session fixation (ES5 only).
• Authorization: Manages Access Control Lists (ACLs) and user roles.
• Audit & Logging: Provides auditing capabilities for security events.
• MFA Implementation: Checks MFA status and enforces MFA requirements (ES5 only).

Example prompts

• "Check if user [user_sys_id] has MFA enabled."
• "Validate the password strength of 'MyNewPassword'."
• "Review recent security events logged in ServiceNow."

Tips & gotchas

• The authentication and session management features (password validation, session age checks) are specifically noted as being ES5-only. Ensure your ServiceNow instance is running ES5 for these functionalities to work.
• This skill primarily focuses on ServiceNow security configurations; it doesn't provide broader system-level security measures.