Delegate Resolver
Some kind of credentials can be resolved using differents secrets engines
It supports by default the following credential types (provided by ServiceNow) :
- ssh_password
- vmware
- jdbc
- basic
- jms
By example, the SSH credential can be resolved with an Active Directory secret engine or a KV secret engine according to your Vault’s configurations.
To support this case, it is possible to define into the credential ID the delegating resolver The following credentials into ServiceNow can be defined :
ad/<credential_id>
: resolves the credential using the AD Resolver (with its configuration, type=ad)kv/<credential_id>
: resolves the credential using the Generic KV Resolver (with its configuration, type=kv)<credential_id>
: resolves the credential using the Generic KV resolver (with a ssh configuration, type=ssh)