Skip to content

Authorization Tokens

For external connections, you can authenticate with the external application using Authorization tokens. For example, you can use Authorization tokens in an HTTP Callout request to the external application. The login credentials in a Connection Authorization (connection_authorization __sys) record can be included in the request by using the following tokens:

  • ${Auth.Username}: For Basic Auth (basic_auth__sys) type records, the user or login name
  • ${Auth.Password}: For Basic Auth (basic_auth__sys) type records, the password for the login user
  • ${Auth.ClientId}: For Client Credential (client_credentials__sys) type records, the client ID or login name
  • ${Auth.ClientSecret}: For Client Credential (client_credentials__sys) type records, the client secret for the login user
  • ${Auth.AuthorizationValue}: “Authorization” value generated for the Authorization type associated to a connection

You cannot use Authorization tokens to connect one Vault to another. Instead, create Vault to Vault connections in the Admin UI. Learn more about Vault to Vault connections in Vault Help.

Vault API does not allow Authorization tokens for user name and password authentication.