Secrets, Tokens and Credentials in Artifactory

Mon, 01 Jan 0001 00:00:00 +0000

This document lists all secrets, tokens and credentials that can be configured and managed by an administrator user in JFrog Artifactory.

List of credentials

Credentials type	Usage	Official documentation link	Comment
Tokens
Access Token	JWT issued for API auth	Access Tokens
Identity Scoped Token	User‑generated, limited‑permission scoped token	Understanding identity tokens
Admin Scoped Token	Used for elevated administrative capabilities	Create admin scoped token
Project Admin Token	Used to perform project‑level administrative actions	Create project admin token
User Scoped Token	Tied to a specific user, allowing actions based on that user’s existing permissions	Create user scoped token
Group Scoped Token	Group specific token, allowing actions based on groups permissions	Create group scoped token
Keys
SSH Keys	Git LFS Integration/Git Workflows	Manage SSH Keys
Other
Username/password	User Authentication	Security configuration
Multi-factor authentication (MFA)	Higher level of security when accessing JFrog Artifactory	Multi-factor Authentication
mTLS	Mutual TLS authentication via reverse proxy	mTLS
API Keys	REST API authentication	API Key	Deprecated

Note

Not mentioned in the table: all scoped tokens can have a reference token created. It is a shorter 64 character string that references the actual token.

Artifactory Component on Software Factory

Secrets, Tokens and Credentials in Artifactory

List of credentials