Securely storing API authentication credentials

[bhalicki]

Hi,

I have a dashboard which connects to an external API (via HTTPS).  It implements JWT (connect via username/password, retrieves a token, then uses the token for all subsequent requests). 

What is the recommended approach for securely storing API credentials (username/password), once a PBIX is published to the service?

Thanks,

Ben.

[v-binbinyu-msft · Accepted solution]

Hi @bhalicki ,

Please try to store the secret on the gateway machine and configure access to that speratly.

Here is a similar case you could refer to:Solved: Re: How to securely store and use token and secret... - Microsoft Fabric Community, I hope it will help you.

Best regards,
Community Support Team_Binbin Yu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.