# Delinea Secret Server (On-Premise) - Secrets Manager Secret Path Expressions

For information on how to configure the Delinea Secret Server (On-Premise) - Secrets Manager credential provider, refer to [Delinea Secret Server (On-Premise) - Secrets Manager](</connectors/credential_providers/delinea_onprem/help/index.html>).

## Username

Path syntax: `{Folder_path}/{secretKey}`

**Before Encoding**

Using Folder Name:

```text
secrets://delinea-vault/folder1/cred/applicationName/directoryName/Username
```

> [!IMPORTANT]
>
> The URL path should always start with the prefix, `secrets://`. Each part of the URL should be URL-encoded. Each URL attribute in the path is case-sensitive.

**After Encoding**

After you encode the URL path, it should appear as follows:

Using Folder Name:

```text
secrets://delinea-vault/folder1%2Fcred%2FapplicationName%2FdirectoryName/Username
```

The following is an explanation of the attributes of this URL:

- `delinea-vault` - Configured Credential Provider in the Credential Provider Section.
- `folder1%2Fcred%2FapplicationName%2FdirectoryName` - Folder path.
- `Username` - Secret Key which needs to be fetched from the Delinea Secret Server (On-Premise) - Secrets Manager.

> [!TIP]
>
> Use [urlencoder.org](<https://www.urlencoder.org/>) to encode your URL attributes.

## Password

Path syntax: `{Folder_path}/{secretKey}`

**Before Encoding**

Using Folder Name:

```text
secrets://delinea-vault/folder1/cred/applicationName/directoryName/Password
```

> [!IMPORTANT]
>
> The URL path should always start with the prefix, `secrets://`. Each part of the URL should be URL-encoded. Each URL attribute in the path is case-sensitive.

**After Encoding**

After you encode the URL path, it should appear as follows:

Using Folder Name:

```text
secrets://delinea-vault/folder1%2Fcred%2FapplicationName%2FdirectoryName/Password
```

The following is an explanation of the attributes of this URL:

- `delinea-vault` - Configured Credential Provider in the Credential Provider Section.
- `folder1%2Fcred%2FapplicationName%2FdirectoryName` - Folder path.
- `Password` - Secret Key which needs to be fetched from the Delinea Secret Server (On-Premise) - Secrets Manager.

> [!TIP]
>
> Use [urlencoder.org](<https://www.urlencoder.org/>) to encode your URL attributes.

## Prefixes and Suffixes

If any secret paths have a prefix or a suffix, you must append a query parameter to the secret path as follows:

- To add a prefix - `?prefix=<prefix>`. For example, if the secret value returned after evaluation is `LocalAdmin`, but the complete value required by the secret field is `DomainOne\LocalAdmin` then the secret path expression will be as follows to add the required prefix:

  ```text
  secrets://delinea-vault/folder1%2Fcred%2FapplicationName%2FdirectoryName/Username?prefix=DomainOne%5C
  ```
- To add a suffix - `?suffix=<suffix>`. For example, if the secret value returned after evaluation is `localadministrator`, but the complete value required by the secret field is `localadminstrator@sp.com` then the secret path expression will be as follows to add the required suffix:

  ```text
  secrets://delinea-vault/folder1%2Fcred%2FapplicationName%2FdirectoryName/Username?suffix=%40sp.com
  ```
- To add a prefix and suffix - `?prefix=<prefix>&suffix=<suffix>`. For example, if the secret value returned after evaluation is `LocalAdmin`, but the complete value required by the secret field is `DomainOne\LocalAdmin@sp.com` then the secret path expression will be as follows to add the required prefix and suffix:

  ```text
  secrets://delinea-vault/folder1%2Fcred%2FapplicationName%2FdirectoryName/Username?prefix=DomainOne%5C&suffix=%40sp.com
  ```

> [!IMPORTANT]
>
> All input parameters must be encoded.

Standard format for credential path:

```text
secrets://{vault-name}/{folder path}/{secretKey}?prefix=someValue&suffix=someValue2
```

> [!NOTE]
>
> The `prefix` and `suffix` are optional.