Introduction

Client secrets provide secure authentication for non-interactive processes in IPMHub, enabling automated workflows through platforms like DevOps pipelines and GitHub Actions. These secrets allow programmatic access to IPMHub functionality while maintaining security and control over permissions.

Key Features

  • Role-Based Access: Assign specific permission levels (Viewer or Contributor) to control access scope
  • Configurable Analytics: Choose the level of analytics data collection
  • Managed Expiration: Set validity periods up to 24 months
  • Revocation Control: Immediately revoke access when needed
  • Security Compliance: Administrative oversight with proper role requirements

Usage and Limitations

Authentication Priority

  • Client secret authentication always takes precedence over interactive authentication
  • When using a client secret, any existing interactive session will be ignored

Multiple Secrets Support

  • IPM supports the use of multiple client secrets simultaneously
  • Each secret can have different roles and analytics settings

Supported Operations

When using client secrets, the IPM client only supports these commands:

  • ipm add: Add and download packages
  • ipm sync: Sync a whole IPM workspace
  • ipm status: Get the status of a IPM workspace
  • ipm publish: Publish new package versions
  • ipm info: Retrieve package information

Access Control

Client secrets can be assigned one of following two roles:

  • Viewer: Allows read-only operations such as downloading packages and workspace synchronization
  • Contributor: Enables package version publication in addition to viewer capabilities

Analytics Options

Each client secret can be configured with different analytics collection modes:

  • Disabled: No analytics data collected
  • Limited: Basic usage metrics only
  • Complete: Full usage analytics collection

Security Considerations

  • Client secrets expire automatically after their configured lifetime (maximum 24 months)
  • Once revoked, secrets cannot be reactivated
  • Expired secrets cannot be renewed - create new ones instead
  • Creation and management require Security Manager role or higher

Managing Client Secrets

Access client secret management through:

  1. Organizations
  2. Select your organization
  3. Settings
  4. Client Secrets

Next Steps