Create Discovery Credentials for Secure Scanning

Use discovery credentials to securely connect to systems and collect data during agentless scans. Credentials authenticate access to devices, applications, and cloud environments without manual sign-in. Create and manage credentials for supported types such as Windows, SSH, SNMP, or AWS to ensure accurate and authorized discovery results.

Required Editions

Available in: Lightning Experience
Available in: Enterprise, Performance, and Unlimited Editions with Agentforce IT Service that have Discovery enabled.
User Permissions Needed
Manage Discovery Application IT Service Asset Discovery

Before you create a discovery credential, review the authentication and access requirements for the target and probe that you plan to use. For more information, see Agentless Discovery Network, Port, and Access Requirements.

  1. From App Launcher, find and select CMDB and Service Graph.
  2. From the navigation panel, select Administration, and then select Discovery.
  3. Select Credential Management.
  4. On the Credential Management page, click New.
  5. Enter a name for the credential.
  6. From the Credential Type dropdown list, select a credential type such as Windows, SSH, SNMP, or AWS Account.
    The fields displayed vary depending on the credential type you select. Each type requires specific authentication details such as usernames, keys, or access tokens. You must valid values based on your organization’s access configuration.
  7. If you want to make the credential available for immediate use during discovery, select Active.
  8. Click Add.

The credential is saved and added to the Credential Management list.

You can view the details, update information, or deactivate the credential as needed before associating it with discovery targets or scans.