HashiTalks 2025 Learn about unique use cases, homelab setups, and best practices at scale at our 24-hour virtual knowledge sharing event. Register
Boundary
Boundary Home

Configure targets with credential brokering

The following section provides steps to configure your targets with credential brokering. When you use credential brokering, Boundary returns credentials to the user when they successfully connect to a target.

Requirements

  • You must have an existing target available. To use brokered credentials to connect to a target that runs SSH, you must use a TCP target type.

  • You must have configured either a static credential store or a Vault credential store:

  • You must have a static credential saved in your static credential store or Vault credential store. The credential must correspond to the target you want to authenticate to.

Configuration

Complete the following steps to configure credential brokering for a target:

  1. Log in to Boundary.
  2. Select Orgs on the navigation pane.
  3. Select your desired org.
  4. Select the project where your target resides.
  5. Click Targets on the navigation pane.
  6. Click on the target you want to configure for credential brokering.
  7. Click on the Brokered Credential tab.
  8. Click Managed and select Add Brokered Credential in the pull down menu.
  9. Do one of the following:
    • If you are using a static credential store: Select the credential that corresponds to your target and click Add Brokered Credentials.
    • If you are using a Vault credential store: Select the credential library that corresponds to your target and click Add Brokered Credentials.

More information

Refer to the following topics for more information:

Edit this page on GitHub