External credential storage for Discovery and Orchestration A ServiceNow instance can store credentials used by Discovery, Orchestration, and Service Mapping in an external credential repository rather than directly in a ServiceNow credentials record. The instance maintains a unique identifier for each credential, the credential type (such as SSH, SNMP, or Windows), and any credential affinities. The MID Server obtains the credential identifier from the instance, and then uses a customer-provided JAR file to resolve the identifier from the repository into a usable credential. Currently, the ServiceNow® platform supports the use of the CyberArk vault for external credential storage. Activate external credential storage for Discovery and OrchestrationThe External Credential Storage plugin is available by request.Components installed with External Credential StorageThe following components are installed with the External Credential Storage plugin.External credential storage architectureExternal credential storage requires a properly configured MID Server to retrieve the credentials from the external store.Configure external credential storage for Discovery and OrchestrationConfigure your instance to obtain credentials from a remote repository.External credential storage logThe MID Server posts log messages about external credential storage.CyberArk credential storage integrationThe MID Server integration with the CyberArk vault enables Orchestration, Discovery, and Service Mapping to run without storing any credentials on the instance.