The Customer Flow
When an SE creates a customer-managed secret, the customer provides the values through their portal:
Customer logs into the portal via magic link
Navigates to "Your Credentials" page
Sees credentials with "Pending" badges β these need their input
Clicks on a credential to expand it
Fills in the required fields (API keys, tokens, connection strings, etc.)
Clicks "Save"
The credential status changes from Pending to Active
The SE is notified and can now deploy bridges that use this credential
Security
All values are encrypted with AES-256-GCM before storage
The SE never sees customer-provided values in plaintext
Customers can show/hide sensitive fields while entering values
Customers can update values at any time
Portal Access Setup
To give a customer portal access:
Create a customer with a valid email address
Optionally configure allowed email domains to restrict who can access the portal (e.g., only
@acme.comemails)The customer receives a magic link when they request access