---
schema_version: "1"
id: d96011eeb3c4fe4334a207cd225e3e3819abb265bda3db033808a7facea7615a
title: Create Discovery Credentials for Secure Scanning
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/it_srvcs_discovery_create_cred.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.it_srvcs_discovery_create_cred.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 55d3b08103c93d58a7267ddc80abcfba5b707ebb3f02d4a3b063029d7bc24f04
description: Use discovery credentials to securely connect to systems and collect data during agentless scans. Credentials authenticate access to devices, applications, and cloud environments without manual sign-in. Create and manage credentials for supported types such as Windows, SSH, SNMP, or AWS to ensure accurate and authorized discovery results.
products:
  - Service Cloud
  - Agentforce IT Service
release: "264"
---
# Create Discovery Credentials for Secure Scanning

Use discovery credentials to securely connect to systems and collect data during agentless scans. Credentials authenticate access to devices, applications, and cloud environments without manual sign-in. Create and manage credentials for supported types such as Windows, SSH, SNMP, or AWS to ensure accurate and authorized discovery results.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with Agentforce IT Service that have Discovery enabled.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d129195e72">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d129195e72 ">Manage Discovery Application</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d129195e72 ">IT Service Asset Discovery</td>

          </tr>
        </tbody>
      </table>

Before you create a discovery credential, review the authentication and access requirements for the target and probe that you plan to use. For more information, see [Agentless Discovery Network, Port, and Access Requirements](https://help.salesforce.com/s/articleView?id=service.it_srvcs_discovery_network_access_requirements.htm&release=264.0.0&type=5 "Improve agentless scan reliability and keep discovered asset data current. Review the connectivity and access requirements for each supported probe before you create discovery targets.").

1. From App Launcher, find and select **CMDB and Service Graph**.
2. From the navigation panel, select **Administration**, and then select **Discovery**.
3. Select **Credential Management**.
4. On the Credential Management page, click **New**.
5. Enter a name for the credential.
6. From the Credential Type dropdown list, select a credential type such as Windows, SSH, SNMP, or AWS Account.
    
    The fields displayed vary depending on the credential type you select. Each type requires specific authentication details such as usernames, keys, or access tokens. You must valid values based on your organization’s access configuration.
7. If you want to make the credential available for immediate use during discovery, select **Active**.
8. Click **Add**.

The credential is saved and added to the Credential Management list.

You can view the details, update information, or deactivate the credential as needed before associating it with discovery targets or scans.