How are stored credentials stored in AGOL

[Lynchburg_GISDivision]

We are looking to take advantage of the ability to store credentials for a secure ArcGIS Server service shared on AGOL. However, I wanted to understand a bit more about how the credentials are stored in AGOL in order to be able to ensure that the credentials are secure. This will no doubt require a explanation to our security folks, and I just want to be able to speak to the method of storage and the security behind it. Is it encrypted etc.

Thanks in advance!

[KellyGerrow]

Hello,

When you store your credentials with ArcGIS Online, the username and password is stored as an Item via a proxy. Security is then controlled to the item using the ArcGIS Online Sharing Model which enables you to keep the content private or share with a group, organization or everyone. All login information occurs over https. You can find out more information about storing credentials at this link: ArcGIS Server web services—ArcGIS Online Help | ArcGIS 

Information about security and encryption can be found on trust.arcgis.com:

Cloud Capabilities—ArcGIS Trust Center | ArcGIS 

-Kelly