.. _PasswordManagementAdminPage:

Password Management Admin Page
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

EDG can store passwords for accessing external systems such as a database, SPARQL endpoint, or another EDG instance. A password entry has a user, URL, password, and an optional scope in which the password can be used.

Common scope values:

* ``urn:x-evn-master:system_config`` for system configuration values managed by an administrator user
* ``urn:x-evn-master:product_config`` for product configuration values managed by a power user
* Other asset collection URIs starting with ``urn:x-evn-master:`` for secrets scoped to a particular asset collection, managed by the collection's manager
* A blank scope indicates legacy administrator settings

Users with privileges to view the Password Management page can add, delete,
or edit the password entries stored in the EDG secure storage.
The **Add New Password** button allows the user to add a password,
and, when an entry is selected, the user can change the password for that
entry or click the **x** to delete that entry.
If the user id, scope, or URL changes for a given entry, the password must be re-entered.

The EDG secure storage is defined upon initial setup. Depending on configuration, it is stored in a password protected encrypted file or in an enterprise secrets management system.


**Further Reading on Password Management Admin Page**

* :ref:`The Setup File: vaultType <setup_vaultType>`

**Further Reading on TopBraid**

* :ref:`introduction`