API Credentials Management
Learn how to manage API credentials in the Keyvault system. This document explains how the root admin account's Keyvault contains all necessary API credentials for publicly used apps. Discover how to access and manipulate Keyvault items through the Admin
The system provides a Keyvault which is encrypted storage in the system's database.
The Keyvault is most commonly used as a place to store API credentials, especially OAuth client ids and secrets.
The keyvault is not used to store end-user credentials for accessing API's, but rather credentials needed by the system to connect to API's on the behalf of all users.
The system keyvault can be accessed from the Admin Console:

The keyvault can also be accessed from the Assembly Editor's account menu at the top right:

System Keyvault management
The System Keyvault dialog provides functionality to add/edit/remove items and to export/import all items in the keyvault:

To edit an item, double-click an item in the list:

OAuth Redirect URL
OAuth API keys are typically obtained from an API provider by filling out registration information that will include a "Redirect URL" or "Redirect URI". This value can be obtained by clicking the button here:

The Redirect URL will be copied to your clipboard.
Accessing Keyvault values in assemblies
The Utility - Keyvault Value module is used to fetch a saved value from the Keyvault.
The most common use of the Keyvault is to store needed API credentials like OAuth client ids and secrets needed for app connection assemblies:
