vault login
Authenticate to a Vault and manage stored credentials.
vault login
Section link for vault loginAuthenticate to a Vault. Without credential flags, opens a browser window for SSO login. With --access-token, --session-id, or --password, authenticates directly without a browser.
vault login [--dns <DNS>] [--username <USERNAME>] [--access-token] [--session-id] [--password]Options
Section link for Options| Option | Type | Required | Description |
|---|---|---|---|
--dns <DNS> | string | Required for --access-token, --session-id, and --password | Vault DNS (for example, myorg.veevavault.com) |
--username <USERNAME> | string | Optional | Username or email. Seeds the SSO login form, or the username for basic auth |
--access-token | flag | Optional | Log in with an API access token. The token is read from a hidden prompt or piped stdin |
--session-id | flag | Optional | Store a pre-existing session ID. The value is read from a hidden prompt or piped stdin |
--password | flag | Optional | Log in with a username and password. The password is read from a hidden prompt or piped stdin |
This command also accepts the global options.
Examples
Section link for ExamplesSSO login (default)
Section link for SSO login (default)vault login --dns myorg.veevavault.comAccess token (headless)
Section link for Access token (headless)vault login --dns myorg.veevavault.com --access-tokenThe CLI prompts for the token with echo disabled.
Username & password
Section link for Username & passwordvault login --dns myorg.veevavault.com --username user@example.com --passwordThe CLI prompts for the password with echo disabled.
vault logout
Section link for vault logoutEnd the active session on the Vault side and remove stored local credentials and session token.
vault logout [<DNS>] [--all]Options
Section link for Options| Option | Type | Required | Description |
|---|---|---|---|
<DNS> | string | Optional | Vault DNS to log out of. If omitted, logs out of the active vault |
--all | flag | Optional | Log out of every stored vault |