Authentication methods
Authentication methods centralize access to a third-party system — credentials, API keys, tokens, certificates — in an encrypted, masked space. A workflow that calls this system selects the corresponding method, instead of entering secrets in each node.
How it fits together
An authentication method is created once, then reused by the nodes that call a third-party system. At execution time, Ecosystem applies what the method describes: Basic encoding, OAuth 2 token acquisition and refresh, injection of an API key into headers or the request, or execution of custom code.
It works together with two other spaces:
- Dictionaries: authentication method fields accept dictionary variables (
{{dictionaries.nomDuDico.cleDuDico}}) to adapt secrets to the execution environment without duplicating the method; - Resources and Apps: the resource carries the configuration of the called system, the authentication method carries the access.
When to use what
| Need | Choice |
|---|---|
| Several nodes share the same authentication scheme (Basic, OAuth 2, API Key, Custom) | Authentication method |
| A value — secret or not — varies by environment (dev, staging, production) | Dictionary variable |
| An encrypted, masked value tied to an auth scheme managed by Ecosystem (OAuth 2 refresh, Basic encoding) | Authentication method |
| A simple key sent in a header or query parameter | Dictionary variable |
What to know before you start
- Values are encrypted and masked. A masked value is not shown in clear text in the interface; to change it, re-enter it.
- Tokens are cached. When the method carries an expiration date (OAuth 2, Custom), Ecosystem keeps the access in memory and avoids regenerating a token on every execution.
- One method per system. Create one method per third-party system, with an explicit name (see Authentication method management), rather than an all-in-one method.
- Fields accept dictionary variables. This is the mechanism to vary a secret per environment without duplicating the method.
Go further
- Create an authentication method — guide
- Authentication method types — reference
- Use authentication methods in workflows — guide
- Authentication method management — best practices