Configure the User Accounts Vault

Some features need to have a user name and a password specified in the configuration in order for the feature to work properly. For example, a scheduled job that imports automated test results needs credentials of a user on whose behalf it creates the Test Cases and Test Runs. For security reasons, administrators may not want certain user credentials stored in the underlying configuration file in the file system.

The User Accounts Vault provides a secure way to store user credentials, and enables administrators to reference them in a secure way in configurations. For each user account that needs to have its credentials specified in configurations, you create a Key and associate the user name and password with it. Then in configurations, instead of supplying the concrete user name and password, you supply the Key value from the User Account Vault. Polarion automatically resolves Key references when necessary.

The User Account Vault can be configured in the global (Repository) scope only. To access the configuration:

  1. Log on with administrator permissions for the repository.

  2. Open the Repository and enter Administration.

  3. Expand User Management and select User Account Vault.

The User Account Vault page presents a table of currently configured Keys. You can add new Keys, edit existing Keys (change the password, for example), or delete existing Keys. Before deleting any Key, be sure it is not used in any configuration, especially in scheduled jobs, which will fail if a nonexistent Key is specified in the job configuration.

Tip:

It is not recommended to create Keys for credentials people who use Polarion. Rather, keys should refer to special user accounts created for automated data access.

For example there is a user polarion which is the system user. This user needs to be specified for jobs like the one cited above for test result imports. You should create a Key for this user in the vault and specify that Key in all configurations requiring system user credentials, rather than the actual user name and password.