Skip to content

Latest commit

 

History

History
73 lines (52 loc) · 3.03 KB

configure-credential-injection.mdx

File metadata and controls

73 lines (52 loc) · 3.03 KB
Raw
layout page_title description
docs
Configure targets with credential injection
Configure credential injection so Boundary provides users with a passwordless experience when connecting to targets. Availabile exclusively for Enterprise users.

Configure targets with credential injection

This feature requires HCP Boundary or Boundary Enterprise

The following section provides steps to configure your targets with credential injection. Credential injection provides end users with a passwordless experience when they connect to targets.

Requirements

  • This feature requires either HCP Boundary or Boundary Enterprise

  • You must have an existing target available.

  • You must have configured either a static credential store or a Vault credential store:

  • You must have a static credential saved in your static credential store or Vault credential store. The credential must correspond to the target to which you want to authenticate.

Configuration

Complete the following steps to configure targets with credential injection:

  1. Log in to Boundary.
  2. Select Orgs on the navigation pane.
  3. Select your desired org.
  4. Select the project where your target resides.
  5. Click Targets on the navigation pane.
  6. Click on your target you want to configure for credential injection.
  7. Click on the Injected Application Credential tab.
  8. Click Managed and select Add Injected Application Credential in the pull down menu.
  9. Do one of the following:
    • If you are using a static credential store: Select the credential that corresponds to your target and click Add Injected Application Credential.
    • If you are using a Vault credential store: Select the credential library that corresponds to your target and click Add Injected Application Credential.
  1. Log into Boundary.
$ boundary authenticate
Please enter the login name (it will be hidden):
Please enter the password (it will be hidden):
  1. Add credential injection to target.
$ boundary targets add-credential-sources \
  -id ttcp_vO60a7TwpI \
  -injected-application-credential-source csvlt_Xqa6V6QwfM

If you are using a static credential store, brokered-credential-source refers to the ID of a credential in the static credential store.

If you are using a Vault credential store, brokered-credential-source refers to the ID of a credential library in the Vault credential store.