How to store user's password in PAD using shared flow

[KT_3]

I'm new to PAD and I have a question around storing usernames and passwords. My intention is to create a flow and share it with a colleague of mine. The flow basically starts off with launching the Oracle application and logging in using the user's username and password. I'm aware we have the option of using 'Populate text field on web page' and selecting the option of 'Direct sensitive text input' but that would require storing the actual username and password within the flow itself. So if I share my flow with my colleague, does this mean he will need to edit the flow and update the username and password values on his computer? Or is there a way for PAD to pull the username and password from something like Windows Credential Manager? 

Appreciate it if someone can shed some light on this!

[Daniel_Pa]

I don't believe there is a straight forward way of "getting credentials" from Windows in PAD. That would be pretty bad honestly, since you would then easily be able to deploy bots that forward these informations while pretending to perform actual tasks.

If you are not using a shared login, the individual users of the flows would have to edit them and enter their credentials, as far as I'm aware. A guide could possibly be made for this, to assist them.

Alternatively, if you are afraid the interface is to complicated for them, you could incorporate a step where they initially fill out their credentials and save them somewhere (either locally, in Dataverse or somewhere else) and afterwards just get them for this location. But this again would be a reduction of safety.

If you can, maybe reach out to the application developer and ask them to implement SSO - this could circumvent the problem.

Feel free to inquire, if you need more information or have supplementing questions.

[charles_ross_oh]

To use services for thi, there's Azure Key Vault or CyberArk

To roll your own, there's Powershell, which has its own problems bound to local machines and user rights. Here's some powershell pseudo script lines

# to enable scripts on the machine: set-executionpolicy remotesigned -Scope CurrentUser
# then this
$dredcred = Get-StoredCredential -Target 'mycredinWindowsCredMgr'
$dredcred.GetNetworkCredential().Password

Within the powershell editor in PAD, you can assign $dredcred items to a %% style variable.

This is working for me when I have access to win cred mgr on the machines involved

[charles_ross_oh]

The Powershell module CredentialManager can do this.