Configure Credentials¶
Credentials allow SchemAlign to connect to external systems.
Do not paste secrets into ordinary text fields
Use the credential/account configuration area for passwords, tokens, keys, and other secrets.
Common credential types¶
- API token
- basic authentication
- OAuth/OIDC profile
- database connection
- external SFTP profile for File Get/File Put
- service account
Recommended process¶
- Create the credential in the correct organization.
- Give it a clear display name.
- Limit access to the projects and users that need it.
- Test the credential before using it in production pipelines.
- Rotate credentials according to your organization's policy.
Environment separation¶
Use separate credentials for production, test, and development.
Managed SFTP authentication¶
Managed SFTP accounts are different from pipeline credentials. When an external system connects into SchemAlign through an SFTP Space, register that client's SSH public key under Storage → SFTP Spaces.
Do not upload the client's private key for managed SFTP access.