The Invantive Credentials Server enables Invantive client products such as [[Invantive Query Tool]], [[Invantive Data Hub]] and [[Invantive Control for Excel]] to use data containers defined on Invantive Cloud. The definitions are used locally, including Invantive Cloud managed credentials such as a password or access token, while all API traffic is flowing directly between the Invantive client product and the connected data containers. When the [[Settings.xml]] defines a `<credentials>` section, the specified data container(s) are included in the database definition containing the section. The section defines the Invantive Cloud service account to use, it's password and the URL segment of the Invantive Cloud database. # Security Use of Invantive Credentials Server on an Invantive Cloud database requires: - An Invantive Cloud service account and password. - Whitelist the public IP addresses of the nodes using Invantive Credentials Server. - Allow the use of Invantive Credentials Server on the database webpage. The password of the Invantive Cloud service account is available in plaintext in the settings file. Apply relevant measures to ensure the confidentiality of this. # Auditing Requests for Invantive Credentials Server are available in the [[Timeline]] on Invantive Cloud. Relevant system messages are visible in the [[System Messages]] webpage. Usage statistics for Invantive Credentials Server are recorded on the [[Database]].