nerdexam
ServiceNow

CSA · Question #334

What are the 6 methods available for user authentication?

The correct answer is A. Local Database: The user name and password in their user record in the instance database. B. Multifactor: The user name and password in the database and passcode sent to the user's mobile C. LDAP: The user name and password are accessed via LDAP in the corporate directory, which has D. SAML 2.0: The user name and password configured in a SAML identity provider account, which E. OAuth 2.0: The user name and password of OAuth identity provider, which has a matching user F. Digest Token: An encrypted digest of the user name and password in the user record.. ServiceNow offers a comprehensive suite of six authentication methods, enabling diverse security strategies including local database, multi-factor, LDAP, SAML 2.0, OAuth 2.0, and Digest Token authentication.

Submitted by mike_84· Apr 18, 2026Database Management and Platform Security

Question

What are the 6 methods available for user authentication?

Options

  • ALocal Database: The user name and password in their user record in the instance database.
  • BMultifactor: The user name and password in the database and passcode sent to the user's mobile
  • CLDAP: The user name and password are accessed via LDAP in the corporate directory, which has
  • DSAML 2.0: The user name and password configured in a SAML identity provider account, which
  • EOAuth 2.0: The user name and password of OAuth identity provider, which has a matching user
  • FDigest Token: An encrypted digest of the user name and password in the user record.

How the community answered

(66 responses)
  • A
    100% (66)

Why each option

ServiceNow offers a comprehensive suite of six authentication methods, enabling diverse security strategies including local database, multi-factor, LDAP, SAML 2.0, OAuth 2.0, and Digest Token authentication.

ALocal Database: The user name and password in their user record in the instance database.Correct

Local Database authentication verifies user credentials directly against the username and password stored in their `sys_user` record within the ServiceNow instance.

BMultifactor: The user name and password in the database and passcode sent to the user's mobileCorrect

Multifactor authentication (MFA) enhances security by requiring users to provide two or more verification factors, such as a password from the database and a passcode sent to a mobile device.

CLDAP: The user name and password are accessed via LDAP in the corporate directory, which hasCorrect

LDAP authentication integrates with an external Lightweight Directory Access Protocol directory, allowing users to authenticate using credentials maintained in their corporate directory.

DSAML 2.0: The user name and password configured in a SAML identity provider account, whichCorrect

SAML 2.0 (Security Assertion Markup Language) enables Single Sign-On (SSO) by redirecting authentication to an external SAML identity provider, which verifies the user's credentials.

EOAuth 2.0: The user name and password of OAuth identity provider, which has a matching userCorrect

OAuth 2.0 is an authorization framework that facilitates delegated authentication through an OAuth identity provider, linking a user's account to a matching user in ServiceNow.

FDigest Token: An encrypted digest of the user name and password in the user record.Correct

Digest Token authentication uses an encrypted hash of the username and password, primarily for secure integration scenarios and web services, rather than direct interactive user logins.

Concept tested: ServiceNow user authentication methods

Source: https://docs.servicenow.com/bundle/utah-platform-administration/page/administer/managing-users/concept/c_UserAuthentication.html

Topics

#User Authentication#Authentication Methods#Platform Security#Identity Management

Community Discussion

No community discussion yet for this question.

Full CSA Practice