User authentication and Instance restriction are examples of what type of security?

User authentication and instance restriction are foundational layers of security that control initial access to the ServiceNow platform itself. User authentication verifies the identity of a user trying to log in (e.g., via local credentials, SSO, MFA). Instance restriction, such as IP range-based authentication, limits which network locations can access the instance. Both are concerned with who can get into the platform in the first place, which falls under the broad category of Platform Access security. These controls are applied before a user can interact with any data or applications within the instance.

A. Physical Security: This refers to the security of the data centers where the instance is hosted, which is managed by ServiceNow and not configured by customers.
B. Roles and Groups: This is a form of authorization that controls what an authenticated user can see and do inside the platform, not the initial access itself.
C. Contextual Security: This governs access to specific records and fields (e.g., via ACLs) based on the user's permissions and other conditions, occurring after successful authentication.

1. ServiceNow Product Documentation, "Platform security," Doc ID: 8a9515d5eb62220005554164a206fe4c. The platform security architecture is described as layers, with the initial layer being "Platform Access," which includes authentication and access controls like IP restrictions.

2. ServiceNow Product Documentation, "Authentication," Doc ID: 8345d195eb62220005554164a206fe7c. This section details the various methods for verifying user identities as part of gaining access to the platform.

3. ServiceNow Product Documentation, "Restrict access to a ServiceNow instance by IP address," Doc ID: 834511d5eb62220005554164a206fe17. This describes instance restriction as a primary method of securing platform access.