> ## Documentation Index
> Fetch the complete documentation index at: https://docs-staging-privilege-worker-scope-pinning.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

> Learn how to store Flows integration credentials in the Vault to reference them during Forms runtime.

# Vaults

The vault lets you securely store secrets or common settings (for example: API keys, <Tooltip tip="Access Token: Authorization credential, in the form of an opaque string or JWT, used to access an API." cta="View Glossary" href="/docs/glossary?term=access+tokens">access tokens</Tooltip>, <Tooltip tip="Access Token: Authorization credential, in the form of an opaque string or JWT, used to access an API." cta="View Glossary" href="/docs/glossary?term=refresh+tokens">refresh tokens</Tooltip>) to authenticate requests with external services or integrations as vault connections.

<Callout icon="file-lines" color="#0EA5E9" iconType="regular">
  * There are connections that require the user to provide credentials (for example, with an Auth0 with a machine-to-machine (M2M) application, you generate an access token with an expiration time and a refresh token). The connection stores both tokens and generates a new access token before it expires.
  * There are external services that require authorizing scopes to generate API credentials. If you change the scopes, update the connection to those services to avoid connection issues.
  * When a connection is added, it is ready to use in your flows. Any updates to an existing connection will propagate automatically.
</Callout>

## Create and modify vault connections

Create and modify vault connections from the vault page or from the flow editor when an action requires credentials.

### Create vault connections from the vault page

Add a vault connection from the vault page by following these steps:

1. Open the Form editor by selecting **Auth0 Dashboard > Actions > Forms.**
2. From the top left corner, select the tenant menu, and then **Vault** to open the vault page.

   <Frame>
     <img src="https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/HcC8VsDq9B3Kkq6Y/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?fit=max&auto=format&n=HcC8VsDq9B3Kkq6Y&q=85&s=ca9b932ae15c6833bba550a8a317f24d" alt="Dashboard > Forms > Vault" data-og-width="700" width="700" data-og-height="324" height="324" data-path="docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/HcC8VsDq9B3Kkq6Y/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?w=280&fit=max&auto=format&n=HcC8VsDq9B3Kkq6Y&q=85&s=0790c89f0788828367e343267ae775a8 280w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/HcC8VsDq9B3Kkq6Y/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?w=560&fit=max&auto=format&n=HcC8VsDq9B3Kkq6Y&q=85&s=f727ebffb4335beb075d8fbdb3a60bb9 560w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/HcC8VsDq9B3Kkq6Y/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?w=840&fit=max&auto=format&n=HcC8VsDq9B3Kkq6Y&q=85&s=fe3e565d53a55a9ec51f1a758ac51125 840w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/HcC8VsDq9B3Kkq6Y/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?w=1100&fit=max&auto=format&n=HcC8VsDq9B3Kkq6Y&q=85&s=eab4bc4b8be4c51b4f7a71a5cb8163e9 1100w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/HcC8VsDq9B3Kkq6Y/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?w=1650&fit=max&auto=format&n=HcC8VsDq9B3Kkq6Y&q=85&s=6a7caf673f696983a4ee7cce12834423 1650w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/HcC8VsDq9B3Kkq6Y/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?w=2500&fit=max&auto=format&n=HcC8VsDq9B3Kkq6Y&q=85&s=9c1d12d882032800d23b449bfc2adc44 2500w" />
   </Frame>
3. Select **Add Vault Connection**.
4. Select the desired action and **Continue**.
5. Add a vault **Connection name** and select **Continue**.
6. Enter the credentials.
   If you don't have the specific credentials, you can select **Create an empty connection** and add the credentials later. Empty connections have an orange icon indicating missing credentials.
7. select **Add Vault Connection**.

### Create vault connections from the flow editor

Add a vault connection from a flow action, for example: Twilio by following these steps:

1. Open the Flow editor by selecting **Auth0 Dashboard > Actions > Forms > Flows**
2. Select a flow and add a **Send SMS with Twilio** action.
3. From the **Vault connection** setting of the action, select the **+** Icon.

   <Frame>
     <img src="https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/vWB2NGnXGpC01Thw/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?fit=max&auto=format&n=vWB2NGnXGpC01Thw&q=85&s=e4203889def04a61e2fcd79bad79d32c" alt="Dashboard > Forms > Vault " data-og-width="1104" width="1104" data-og-height="191" height="191" data-path="docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/vWB2NGnXGpC01Thw/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?w=280&fit=max&auto=format&n=vWB2NGnXGpC01Thw&q=85&s=d962e075d8506d0006e8447fd3963bf0 280w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/vWB2NGnXGpC01Thw/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?w=560&fit=max&auto=format&n=vWB2NGnXGpC01Thw&q=85&s=8892e6020127423fbe669d7852fec301 560w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/vWB2NGnXGpC01Thw/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?w=840&fit=max&auto=format&n=vWB2NGnXGpC01Thw&q=85&s=491571187785813d35c15da8922e57d2 840w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/vWB2NGnXGpC01Thw/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?w=1100&fit=max&auto=format&n=vWB2NGnXGpC01Thw&q=85&s=8ec077109ed6473c2710ad8c55413482 1100w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/vWB2NGnXGpC01Thw/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?w=1650&fit=max&auto=format&n=vWB2NGnXGpC01Thw&q=85&s=cc02042df4815e753bb0f997601b4468 1650w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/vWB2NGnXGpC01Thw/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?w=2500&fit=max&auto=format&n=vWB2NGnXGpC01Thw&q=85&s=530da1c3e4de541290113013f91356f4 2500w" />
   </Frame>
4. Add a vault **Connection name** and select **Continue**.
5. Enter the credentials.
   If you don't have the specific credentials, you can select **Create an empty connection** and add the credentials later. Empty connections have an orange icon indicating missing credentials.

   <Frame>
     <img src="https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/VgJ2m2668kRZw54q/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?fit=max&auto=format&n=VgJ2m2668kRZw54q&q=85&s=e17a6c5dc7de1dc55ee2fa8063ffa021" alt="Dashboard > Forms > Vault > Twilio connection settings" data-og-width="1369" width="1369" data-og-height="491" height="491" data-path="docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/VgJ2m2668kRZw54q/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?w=280&fit=max&auto=format&n=VgJ2m2668kRZw54q&q=85&s=9ad267638d6b3ad574bee79203c6ebad 280w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/VgJ2m2668kRZw54q/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?w=560&fit=max&auto=format&n=VgJ2m2668kRZw54q&q=85&s=9f338c486f5868dd60180bde1437c49d 560w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/VgJ2m2668kRZw54q/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?w=840&fit=max&auto=format&n=VgJ2m2668kRZw54q&q=85&s=e1e3b522c5b5c3ff44812166b4d8fd19 840w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/VgJ2m2668kRZw54q/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?w=1100&fit=max&auto=format&n=VgJ2m2668kRZw54q&q=85&s=c117b5155a53ec8c68753353f43fd319 1100w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/VgJ2m2668kRZw54q/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?w=1650&fit=max&auto=format&n=VgJ2m2668kRZw54q&q=85&s=090cd6bc4be61cd78c5441c55af99def 1650w, https://mintcdn.com/docs-staging-privilege-worker-scope-pinning/VgJ2m2668kRZw54q/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?w=2500&fit=max&auto=format&n=VgJ2m2668kRZw54q&q=85&s=0093eb7973c04cc7f940124ef2196e8b 2500w" />
   </Frame>
6. Select **Add Vault Connection.**
