Skip to content

Named Credentials

Named Credentials allow administrators to securely store and reuse credentials across the Portal. Once a credential is created, it can be referenced by name in data sources, integrations, and other features -- without needing to re-enter sensitive information like passwords or API keys.

Named Credentials are managed in the Admin Console under the Named Credentials section.

Credential Types

The following credential types are available:

Type Description
Database Connection Database connection strings for use with data sources (PostgreSQL, SQL Server, MySQL, Snowflake, etc.)
S3 AWS Access Key ID and Secret Access Key for S3 bucket access (used by the Asset Manager)
Azure Active Directory Azure AD / Entra ID credentials for Power BI and SharePoint integrations
Tableau Connected App Client ID, Secret ID, and Secret Value for Tableau Connected App authentication
ThoughtSpot ThoughtSpot trusted authentication secret key
SSL Certificate SSL certificate in PEM format
SSL Private Key SSL private key in PEM format

Managing Credentials

Creating a Credential

  1. Navigate to Admin Console > Named Credentials.
  2. Click New Credentials.
  3. Select the credential type.
  4. Enter a name for the credential.
  5. Fill in the credential data fields.
  6. Click Save.

Editing a Credential

  1. Find the credential in the list.
  2. Click the actions menu and select Edit.
  3. Update the credential data.
  4. Click Save.

Deleting a Credential

  1. Find the credential in the list.
  2. Click the actions menu and select Delete.
  3. Confirm the deletion.

Warning

Deleting a credential that is in use by a data source or integration will break that connection. Ensure no features depend on the credential before deleting.

Sorting and Filtering

The credentials list supports:

  • Sort by Name or Type
  • Search by credential name or type
  • Filter by credential type

Where Credentials Are Used

Named Credentials are referenced throughout the Portal:

  • Data Sources - Select a database connection credential when creating or editing a data source. All data sources using the same credential automatically pick up changes when the credential is updated.
  • Asset Manager - S3 credentials for S3-backed storage, Azure AD credentials for SharePoint-backed storage.
  • Tableau - Connected App credentials for Tableau Server/Online authentication.
  • ThoughtSpot - Trusted authentication secret for ThoughtSpot integrations.
  • SAML - SSL certificates and private keys for SAML service provider configuration.

Security

  • Only admin users can create, edit, or delete credentials.
  • Sensitive credential data (passwords, keys, tokens) is never returned in API responses. Only the credential name, ID, and type are visible.
  • Credentials are stored encrypted on the Portal server.
  • When a credential is selected for use (e.g., in a data source), only a reference to the credential ID is stored -- not the actual credential data.