Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

How application credentials are stored in Saviynt?

GauravJain
Regular Contributor
Regular Contributor

Hi 

Need to understand how credentials are stored in Saviynt? 

In case we are not able to use any of the available vault connectors in Saviynt and we have to store credentials in Saviynt connectors directly then from the security perspective what all standards are followed by Saviynt in keeping customers password safe?

Please guide us in case there is any documentation around this on Saviynt documentation portal.

Regards

Gaurav

3 REPLIES 3

rushikeshvartak
All-Star
All-Star

Credentials are stored in saviynt database table and encrypted 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

can you please share all aspects of encryption mechanism?

Saviynt supports data encryption in transit via SSL (and VPC / VPN). Strong encryption schemes such as AES (256 / 128 bit) and 3DES are supported. Data at rest is encrypted via native DB encryption. Currently, only predefined data fields are encrypted at rest.

 

If the question is about how we are securely storing the password of a service account in a connector we are using Advanced Encryption Standard (AES) algorithm to encrypt the password. This allows us to authenticate with  AD or any target application. Additionally, if you are looking for details in terms of how we are  storing the user credentials, that Saviynt uses to authenticate users locally, we use bcrypt hashing algorithm.

Please find below information and reference link.

rushikeshvartak_0-1706018822488.png

 

https://docs.saviyntcloud.com/bundle/SSM-Architecture-v55x/page/Content/Saviynt-Architecture.htm#Vis...


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.