Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Create credential store for Password Reset in Service Operations Workspace

Create a password reset credential store record to configure access to your credential store server while a user is changing or resetting a password.

About this task

In addition to host connection information, you can specify the password hints that users should see, restrictions on password reuse, the allowed number of failed reset attempts, and other settings.

Before you begin

Role required: admin

Procedure

  1. Navigate to All > Service Operations Workspace > Overview.

  2. On the Admin Center page, do one of the following:

    • In the Overview tab, select the Configure button in the Service Desk Assisted Password Reset card.
    • In the Configurations tab, select Service Desk Assisted Password Reset card.
    • On the Credential stores card, select Configure.

    The default credential store is displayed.

  3. On the form, fill in the fields.

FieldDescription
NameName of the credential store for service desk assisted password reset.
DescriptionDetailed information about the credential store.
TypeType of credential store that you are connecting to. A ServiceNow credential store type is a template that provides the required set of capabilities for a particular kind of credential store.Credential stores inherit the functionality of the credential store type.
Auto generate passwordScript include that generates a temporary password for use during the reset process.If you select the Enforce history policy check box, then you must specify a value for Auto-generate password that is compliant with the password policy.
Child AliasChild aliases are associated with the base alias. After creating a connection and credential alias, you can create a child alias to configure multiple connections for a password reset credential store.When a password reset request is made, the flow checks whether there are child alias connections at the process level. If the child alias is configured at the credential store level, the flow picks the aliases connections and proceeds with the request.
Enable password policySee Enable password policies on your instance
Enable password strengthSelect the check box to: - Option to display the text box for the strength rule script so that you can update the script. - Display the graphical password strength bar to the user while the user changes or resets the password.
Password policyDefault password policy.
Enforce history policyOption to ensure that the users don’t reuse passwords. For example, you might configure the history policy to not allow the user to reuse any of the previous 10 passwords. Follow this procedure to use the feature: 1. Select the Enforce history policy check box. 2. In the Password Reset Credential Store Parameters related list, create a password_history_limitparameter. 3. Set the value of the parameter to the number of previous passwords that cannot be used (maximum 10). The default value of 0 (zero) enables use of any previous password.
  1. Select Submit.

  2. Select Test Connection.

    You must test the connection to a credential store after you configure a new credential store.

Parent Topic:Setting up Service Desk assisted Password Reset in Service Operations Workspace