Credential management
Boundary presents credentials to you through credential brokering. Credential stores and libraries are configured by platform operators — see the Administration Guide: Credential store management.
Credential brokering
Credential brokering is a workflow, where Boundary retrieves credentials from a credentials store and presents them to the end user. The end user then enters the credentials into the session when prompted.
You can attach brokered credentials to either TCP or SSH targets. Brokered credentials can take the form of a token, username, and password, SSH private key, certificate, JSON blob, or an unstructured secret stored in Vault, for example.
You can find how to configure targets with credential brokering following this guide.
Useful resources
The following resources help you to implement, troubleshoot, and resolve credential brokering related issues.