The forgot password email link feature does not work, showing the error message: "Security restricted when invoking processor".

Steps to Reproduce


1 - Go to /navpage.do
2 - Click "Forgot Password"
3 - Fill in user name and email address
4 - Click "Done"
5 - Go to the received email
6 - Click the link in the email

Users see a blank page with the error message: "Security restricted when invoking processor".


This problem will be fixed in the London release. The workaround consists in adding the public role to the scripted processor 'passwordreset', as it needs to be accessed by non-logged in users while resetting their passwords. 
To do this:
1 - Open: System Definition: Processors > PasswordResetProcessor 
2 - Change form layout to add field: Roles 
3 - Configure the field by adding "public" 
4 - Save changes 
5 - Have the affected users resetting their passwords again

Related Problem: PRB1237204

Seen In

There is no data to report.

Intended Fix Version


Safe Harbor Statement

This "Intended Fix Version" information is meant to outline ServiceNow's general product direction and should not be relied upon in making a purchasing decision. The information provided here is for information purposes only and may not be incorporated into any contract. It is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. The development, release, and timing of any features or functionality described for our products remains at ServiceNow's sole discretion.

Associated Community Threads

There is no data to report.

Article Information

Last Updated:2018-03-22 11:14:47