Third Party Credentials not Masked

RE: Third Party Credentials not Masked

Ankur V — Wed, 21 Feb 2018 19:02:47 GMT

This seems to have been fixed in 18.1 we have a POC instance running on 18.1 and i can see the credentials being masked and option to clear them as well.

RE: Third Party Credentials not Masked

Josh — Thu, 15 Feb 2018 18:08:14 GMT

There is no realistic way you are going to be able to hide system/service credentials inside of Appian from an Appian System Admin. You may want to rethink your permission structures.

RE: Third Party Credentials not Masked

Ankur V — Thu, 15 Feb 2018 17:47:00 GMT

True , in our case there are 2 admins one who is global Appian admin and other system admin who also has access to AWS instance. The global admin should not be able to see the AWS credentials .If mask feature is available the passwords and keys should be masked or encrypted rather than showing them as plain text. I still feel there might be an issue during our Audit

RE: Third Party Credentials not Masked

Josh — Thu, 15 Feb 2018 17:40:19 GMT

The only users that have access to third party credentials are system admins. Best practices dictate you only have a handful of system admins in production who would be cleared to view private keys.