How Credentials Work Print this Topic Previous Page Up One Level Next page

Home >  Configuring Jobs > Credentials >

How Credentials Work

A credential record is the combination of user name and password associated with a user account on the operating system where the FlowForce Server job runs. When you define a job in FlowForce Server, you must supply the credentials with which the job must be executed. Note that if the user account associated with the supplied credentials does not have sufficient rights on the operating system, the job cannot execute successfully.


You can define credentials either every time when you create a new job (referred to as local credentials), or store them as a standalone object in a container (referred to as standalone credentials). In the latter case, you can refer to any standalone credentials while creating any job, provided that you have the relevant permissions. Standalone credentials are also convenient because you can update them easily when they change. By contrast, if you create local credentials every time when you define a new job, you need to manually update all jobs whenever the credentials change.


You can refer to standalone credentials not only from jobs, but also from job functions that require credentials as parameters. In particular, when you are using ftp functions in a job step, you can either specify credentials locally, or provide a reference to standalone credentials.



Users cannot refer to credentials stored in containers where they do not have the relevant permissions granted. To make credentials from a specific container accessible to a user or to a role, administrators must grant the Credentials - Use permission to that user or role (see How Permissions Work).
The credential password may be an empty string.
As the clear text password needs to be sent to the operating system's login function, passwords are stored in a reversible encrypted form in the FlowForce Server database. The administrator should make sure to restrict access to the FlowForce Server's database file.
File watch triggers also require credentials.

© 2019 Altova GmbH