Secrets
AvailableReferencing credentials securely.
Integration credentials should be referenced securely rather than embedded directly into BPMN models.
Connector
Connection / Secret Reference
Secret Store
Runtime
A process developer should see a connection name, never a raw secret:
Connection: Salesforce Production ✓
clientSecret: ******** ✗Security areas to plan for
- Authentication and authorization
- Tenant isolation
- API access control
- Secret handling
- Worker authentication
- Connector credentials
- Audit
- Environment separation
Never put raw passwords, API keys, or private credentials into ordinary process variables.