Multiple IIS Sites - Seperate Credential vault


My dashboards run on a single host, in seperate IIS sites. The idea is that sites are seperated, so different teams can run their own dashboards, in an effort to limit what a person can mess up or look into.

It just occured to me, that Secret Variables saved in one dashboard, can be imported into another with no effort. which of course is a bit of a booboo.

What options are there, to store credentials in my use case.
We have a Password manager with API access, but even then, I don’t see any way to store tokens securely.

Do you have a single PSU instance with multiple dashboards or multiple PSU instances with one dashboard?

The secret management on windows uses Credential Manager so if you change the user account of the App Pool the sites won’t have access to the same secrets.

1 Like