Require obfuscation of classic mobile app UI [Updated in Security Center 1.3]
Use the glide.ui.m.blur_ui_when_backgrounded property to obfuscate all fields from the snapshot as the image is saved during the backgrounding process.
On Android devices, the Android operating system takes a screenshot for usage in the recent task menu when the application is sent to background. Users can also take manual screenshots of the application, which are stored publicly on the device.
On iOS devices, the iOS operating system also allows applications to save an image file. This file represents the last screen seen by the user when the application is sent to the background. While the intent is to provide a better user experience, it also creates a security risk because the images are saved as PNG image files.
Note: This setting or configuration is per instance basis so the user must connect to the instance with the property configured.
To obfuscate all fields from the snapshot in the ServiceNow Classic app, see Configure the blur app option to improve security.
Example
When you set this property to true, the background application is obfuscated for iOS devices, and blacked out for Android iOS devices.
More information
| Attribute | Description |
|---|---|
| Property/Plugin Name | glide.ui.m.blur_ui_when_backgrounded |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Category | Authentication |
| Purpose | To obfuscate all fields from the snapshot as the image is saved during the backgrounding process. |
| Recommended value | true |
| Security risk rating | 2.4 |
| Functional impact | If the glide.ui.m.blur_ui_when_backgrounded property is set to true, the native apps use the parameter defined on the server to blur the screen when the app enters the background. - It blurs the screenshots taken by iOS and Android when the app enters the background. Note: Enabling this setting can prevent users from taking screenshots of the classic mobile app, which may be desirable for support purposes.
|
| Security risk | \(Medium\) A compromised \(jailbroken\) device would enable an attacker to have full access to the file system, with access those files/snapshots with sensitive information embedded in them. |
To learn more about adding or creating a system property, see Add a system property.
Parent Topic:Authentication