# HashiCorp Vault (On-Premise) Credential Provider

The SailPoint HashiCorp Vault (On-Premise) credential provider offers credential cycling for added security in configured SailPoint connectors. This credential provider fetches refreshed, uncompromised authorization credentials from HashiCorp Vault (On-Premise) to authenticate sources in SailPoint.

This guide discusses how to manage a HashiCorp Vault (On-Premise) credential provider.

For information on creating a new HashiCorp Vault (On-Premise) credential provider, refer to [Adding a New Credential Provider in SailPoint](<https://documentation.sailpoint.com/connectors/credential_providers/hashicorp_onprem/help/config_new_cred_prov.html>).

## Prerequisites

Before you configure your credential provider, you must consider the following prerequisite items.

- Use a supported authentication type:

  - Userpass
  - AppRole
  - JWT (Static Key)
- If the HashiCorp Vault (On-Premise) secret server is configured to communicate using HTTPS, the required certificate needs to be in the VA server in `/home/sailpoint/certificates directory`.
- For VA-based Deep Governance connectors, the source and credential provider virtual appliances must be in the same cluster.
- VA-based Deep Governance connectors, SaaS-based Deep Governance, Discovery, and Quick Compliance connectors now support the use of credential providers.

## Supported Platforms

This credential provider supports the following platforms:

- HashiCorp Vault (On-Premise) version 1.16.2 or later