Q: What causes User Cannot Log In to ServiceNow?

Account is locked due to failed login attempts — Check the sys_user table for the user record. Look at the 'Locked out' field and 'Failed attempts' counter - if locked out is true or failed attempts is at your threshold, this is the cause. User account is inactive — In the sys_user table, check the 'Active' field for the user record. If this is false, the user cannot log in regardless of correct credentials. User is trying wrong login URL or instance — Verify the user is accessing the correct instance URL. Check if they're using dev/test URLs in production or vice versa, or hitting a decommissioned instance. SSO/SAML configuration issue for this user — Check the user's 'Source' field in sys_user table and verify the corresponding identity provider record in sys_auth_profile_identity_provider table is active and properly configured. MFA token failure or expired device — Look in the System Log > Authentication for MFA-related errors. Check if user has registered MFA devices in their profile and if tokens are synchronized. IP restriction blocking user access — Check the user's Location field in sys_user table and verify any IP restrictions in sys_user_role or ACL rules. Look for 'IP Address' restrictions in the user's roles.

Question 1

What causes User Cannot Log In to ServiceNow?

Accepted Answer

Account is locked due to failed login attemptshigh likelihood

Check the sys_user table for the user record. Look at the 'Locked out' field and 'Failed attempts' counter - if locked out is true or failed attempts is at your threshold, this is the cause.

User account is inactivehigh likelihood

In the sys_user table, check the 'Active' field for the user record. If this is false, the user cannot log in regardless of correct credentials.

User is trying wrong login URL or instancemedium likelihood

Verify the user is accessing the correct instance URL. Check if they're using dev/test URLs in production or vice versa, or hitting a decommissioned instance.

SSO/SAML configuration issue for this usermedium likelihood

Check the user's 'Source' field in sys_user table and verify the corresponding identity provider record in sys_auth_profile_identity_provider table is active and properly configured.

MFA token failure or expired devicemedium likelihood

Look in the System Log > Authentication for MFA-related errors. Check if user has registered MFA devices in their profile and if tokens are synchronized.

IP restriction blocking user accesslow likelihood

Check the user's Location field in sys_user table and verify any IP restrictions in sys_user_role or ACL rules. Look for 'IP Address' restrictions in the user's roles.

Question 2

How do you fix User Cannot Log In to ServiceNow?

Accepted Answer

How to fix it Navigate to User Administration > Users and search for the affected user by User ID or email. Open the user record and check the Active checkbox. If unchecked, check it and click Update. Check the Locked out field. If true, uncheck it and clear the Failed attempts field by setting it to 0. Verify the user is accessing the correct URL by checking your instance name. Confirm they're using https://yourinstance.service-now.com and not a dev or test instance URL. If using SSO, check the user's Source field in their user record. Navigate to System Security > Authentication > Identity Providers and verify the corresponding provider is active. For MFA issues, go to System Logs > System Log > Authentication and filter by the user's ID to see specific MFA error messages. If MFA errors are present, go to the user record and click Reset Multi-Factor Authentication from the related links to clear their registered devices. Check for IP restrictions by reviewing the Location field in the user record. If populated, verify the location record allows the user's current IP address. For local authentication, check if password reset is needed by looking at the Password needs reset field or using Set Password from the user record.

Question 3

How do you prevent User Cannot Log In to ServiceNow?

Accepted Answer

Set up automated notifications for account lockouts by creating an event rule on the sys_user table that triggers when the 'Locked out' field changes to true. Configure appropriate session timeouts and failed login attempt thresholds in System Security > Session Configuration to balance security with user experience. Implement regular audits of inactive users by creating scheduled reports that identify accounts that haven't logged in within your organization's policy timeframe. Establish a clear process for MFA device management, including self-service reset capabilities and admin procedures for device replacement. Document and communicate the correct login URLs for different environments (prod, test, dev) to prevent users from attempting to access wrong instances.

User Cannot Log In to ServiceNow

Symptom

Possible Causes

Debugging this in a real instance?

Solution

How to fix it

Prevention Tips

Test Your Knowledge