Controle de Credenciais

[Vitor_HugoVicen]

Olá pessoal,
Vocês poderiam compartilhar alguns detalhes de como controlam das credenciais dos seus robôs? Existe alguma interface disponível para a gestão das senhas ou é feito manualmente no painel "System" do BP?

Desde já obrigado!

------------------------------
Vitor Hugo Vicente Batista
------------------------------

[PabloSarabia]

Hi Vitor!

(Note: Translated with Google translate)

Normalmente para uma boa prática, as senhas nunca devem ser armazenadas em processos ou objetos. Existe um "Credential Manager" que ajuda você a armazenar com segurança suas senhas.

Isto pode ser encontrado na aba "System", em "Security", e depois em "Credentials".

Deixo aqui o curso da universidade, caso isso o ajude: Blue Prism Credentials and Credentials Manager


Espero que isto ajude.

Vejo você na comunidade, tchau :)

------------------------------
Pablo Sarabia
Solution Manager & Architect
Altamira Assets Management
Madrid
------------------------------

[Vitor_HugoVicen]

Hi Pablo !

Thanks for your promply reply : ) 
I was wondering if there's a more direct way for the key-user himself to change his robots passwords.
Let me give you a context...
We have lot of robots to manage. Every time a credential expires we must contact the robot key-user (from business area) and schedule a meeting to change the password (because we can't change for him since we're just developers, and those robots usually uses different kind of systems like SAP, Websites, etcetera). For "direct way" I mean "the key-user himself can change his credentials without open Blue Prism interface". There's some interface, web application or something else that could provide this for us?

Regards.

------------------------------
Vitor Hugo Vicente Batista
------------------------------

[devneetmohanty07]

Hi Vitor ,

Blue Prism does not gives us any such means of retrieving the credentials from any separate interface or window that I can tell you. Also, it does not have any API or command line code to get the credentials as well. And this I think is due to the nature of what we are asking here. Ideally they can't provide any other ways of retrieving it which can cause compliance issue or violate any governance policies.

But there are some workarounds, first one would be to directly access the backend database of Blue Prism and there is a table called BPACredentials which will give you Username and Password but the password is stored in an encrypted format so you may not be able to decipher it without the encryption key which Blue Prism uses internally while using get credential action. But, if you store the password as some other parameter value then you could access the value from BPACredentialsProperties Now for making it accessible, you would require to create a front end app and connect it to the backend database it via an API to get the results. But I don't recommend this approach as it can cause performance issue for your database and put a lot of load as well.

The second approach can be to create a process which accepts an input parameter say credential name and gives you two output parameters which would be 'Username' and 'Password'. Now, this process can be exposed as a webservice and you can either let the users call the API directly or use this API in some front end application or a chatbot system to make the user interaction possible. I do have a video where I integrated Google Chatbot With Blue Prism that can give you some idea: Google Dialog Flow Chatbot Integration With Blue Prism

However, such a use case is kind of critical and risky in nature so I think that is the reason why you don't have any readymade solution for it but like I mentioned you always can invent the new wheel if situation demands that.

------------------------------
----------------------------------
Hope it helps you out and if my solution resolves your query, then please mark it as the 'Best Answer' so that the others members in the community having similar problem statement can track the answer easily in future

Regards,
Devneet Mohanty
Intelligent Process Automation Consultant | Sr. Consultant - Automation Developer,
WonderBotz India Pvt. Ltd.
Blue Prism Community MVP | Blue Prism 7x Certified Professional
Website: https://devneet.github.io/
Email: devneetmohanty07@gmail.com

----------------------------------
------------------------------

------------------------------
----------------------------------
Hope it helps you out and if my solution resolves your query, then please mark it as the 'Best Answer' so that the others members in the community having similar problem statement can track the answer easily in future

Regards,
Devneet Mohanty
Intelligent Process Automation Consultant | Sr. Consultant - Automation Developer,
WonderBotz India Pvt. Ltd.
Blue Prism Community MVP | Blue Prism 7x Certified Professional
Website: https://devneet.github.io/
Email: devneetmohanty07@gmail.com

----------------------------------
------------------------------

[PabloSarabia]

Hi Vitor!

I think there is no easy way for users to change this without use the Blue Prism console.

Another option for this is to implement a method to change directly the password. In the Credential object, you have two action for this, "Generate Password" (it's gives you a random password, you can use then the "Set" action to set the new password) or use "Generate and Set" action to create a new password and set it in a specific username.

In both cases, you can implement an Expiration Date, so you can check when the password has expired or is near the expiration date.

The only problem with this is that you will have to create the password change in the target system. But is more simple and fully automatic.


Hope this helps you!

See you in the Community, bye :)

------------------------------
Pablo Sarabia
Solution Manager & Architect
Altamira Assets Management
Madrid
------------------------------