---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Credential aliases for Orchestration activities

# Credential aliases for Orchestration activities {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 30. Juni 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Credential alias gives an administrator more control over the credentials used in
Orchestration activities.

This is useful when an activity requires specific credentials to perform a task. You can use a
credential tag to assign individual credentials to any activity in a Orchestration workflow or
assign different credentials to each occurrence of the same activity type in an Orchestration
workflow.

Credential alias interacts with
[credential affinity](https://servicenow-prod.fluidtopics.net/4yn2d2LrXk7Q0HKRvd7Cfg "Credential affinity is an association between a set of credentials and a device on your network.") to determine which credentials should be used for an Orchestration activity.

## How credential alias works

A [business rule](https://www.servicenow.com/docs/access?context=c_BusinessRules&version=australia&pubname=australia-api-reference&ft:locale=en-US) called Insert Discovery Affinity (renamed from Insert Credential Affinity in the Geneva release) runs when a record is inserted into the ECC Queue.
This rule determines whether a credential affinity exists for the device and identifies the proper credential_id (the sys_id of the record in the Credentials
`[discovery_credentials]` table) to use. When the platform encounters an affinity with a credential alias value defined (credential_alias in the business rule), the business rule determines if
the credential referenced by the affinity has the specified alias. If it does, the business rule selects the credential_id of the credential alias and passes that value to the MID Server. If the credential does
not have the specified credential alias, any other affinities that exist for the target system will be checked. If no affinity references an appropriately tagged credential, the MID Server iterates through the Credentials
\[discovery_credentials\] table and selects the credential with the appropriate tag. The MID Server then creates a new affinity for this credential.