> ## Documentation Index
> Fetch the complete documentation index at: https://docs-dev-privilege-worker-scope-pinning.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

> Learn how to store Flows integration credentials in the Vault to reference them during Forms runtime.

# Vaults

The vault lets you securely store secrets or common settings (for example: API keys, <Tooltip tip="Access Token: Authorization credential, in the form of an opaque string or JWT, used to access an API." cta="View Glossary" href="/docs/glossary?term=access+tokens">access tokens</Tooltip>, <Tooltip tip="Access Token: Authorization credential, in the form of an opaque string or JWT, used to access an API." cta="View Glossary" href="/docs/glossary?term=refresh+tokens">refresh tokens</Tooltip>) to authenticate requests with external services or integrations as vault connections.

<Callout icon="file-lines" color="#0EA5E9" iconType="regular">
  * There are connections that require the user to provide credentials (for example, with an Auth0 with a machine-to-machine (M2M) application, you generate an access token with an expiration time and a refresh token). The connection stores both tokens and generates a new access token before it expires.
  * There are external services that require authorizing scopes to generate API credentials. If you change the scopes, update the connection to those services to avoid connection issues.
  * When a connection is added, it is ready to use in your flows. Any updates to an existing connection will propagate automatically.
</Callout>

## Create and modify vault connections

Create and modify vault connections from the vault page or from the flow editor when an action requires credentials.

### Create vault connections from the vault page

Add a vault connection from the vault page by following these steps:

1. Open the Form editor by selecting **Auth0 Dashboard > Actions > Forms.**
2. From the top left corner, select the tenant menu, and then **Vault** to open the vault page.

   <Frame>
     <img src="https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/qYgaRCBOV0mMi9aI/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?fit=max&auto=format&n=qYgaRCBOV0mMi9aI&q=85&s=b0036bbdd7bf34df7353fd613db52ab7" alt="Dashboard > Forms > Vault" data-og-width="700" width="700" data-og-height="324" height="324" data-path="docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/qYgaRCBOV0mMi9aI/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?w=280&fit=max&auto=format&n=qYgaRCBOV0mMi9aI&q=85&s=394aa91abf830861651d5518ea66fe3b 280w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/qYgaRCBOV0mMi9aI/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?w=560&fit=max&auto=format&n=qYgaRCBOV0mMi9aI&q=85&s=ecca22df1139780435dc5c1bfcd45e91 560w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/qYgaRCBOV0mMi9aI/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?w=840&fit=max&auto=format&n=qYgaRCBOV0mMi9aI&q=85&s=b7ac226e39c0e99bf7c4e0893b8d66a5 840w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/qYgaRCBOV0mMi9aI/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?w=1100&fit=max&auto=format&n=qYgaRCBOV0mMi9aI&q=85&s=008696a8d4b8b828b6d19b7880ef4d5c 1100w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/qYgaRCBOV0mMi9aI/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?w=1650&fit=max&auto=format&n=qYgaRCBOV0mMi9aI&q=85&s=dffe911cead6d07685fd2b0b371bca80 1650w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/qYgaRCBOV0mMi9aI/docs/images/cdy7uua7fh8z/1sPNPKO6nuEDCuiYGRWSur/d85dc616170eaf2d7d5f321750863ccf/vault-connection.png?w=2500&fit=max&auto=format&n=qYgaRCBOV0mMi9aI&q=85&s=f6da46f1dcd486c92c73670c4be0ac82 2500w" />
   </Frame>
3. Select **Add Vault Connection**.
4. Select the desired action and **Continue**.
5. Add a vault **Connection name** and select **Continue**.
6. Enter the credentials.
   If you don't have the specific credentials, you can select **Create an empty connection** and add the credentials later. Empty connections have an orange icon indicating missing credentials.
7. select **Add Vault Connection**.

### Create vault connections from the flow editor

Add a vault connection from a flow action, for example: Twilio by following these steps:

1. Open the Flow editor by selecting **Auth0 Dashboard > Actions > Forms > Flows**
2. Select a flow and add a **Send SMS with Twilio** action.
3. From the **Vault connection** setting of the action, select the **+** Icon.

   <Frame>
     <img src="https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/LgymarlLDzodE3XF/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?fit=max&auto=format&n=LgymarlLDzodE3XF&q=85&s=1068174723e468f9de9dc4b408c7d4cd" alt="Dashboard > Forms > Vault " data-og-width="1104" width="1104" data-og-height="191" height="191" data-path="docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/LgymarlLDzodE3XF/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?w=280&fit=max&auto=format&n=LgymarlLDzodE3XF&q=85&s=be605b472e390684abf0362e6474a33a 280w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/LgymarlLDzodE3XF/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?w=560&fit=max&auto=format&n=LgymarlLDzodE3XF&q=85&s=2c215c55cbe0f6024145d7e202049b84 560w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/LgymarlLDzodE3XF/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?w=840&fit=max&auto=format&n=LgymarlLDzodE3XF&q=85&s=c316ea2c3d3068b47ea997e5e64153bb 840w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/LgymarlLDzodE3XF/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?w=1100&fit=max&auto=format&n=LgymarlLDzodE3XF&q=85&s=295e970934370d286da85f17c45b2f4e 1100w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/LgymarlLDzodE3XF/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?w=1650&fit=max&auto=format&n=LgymarlLDzodE3XF&q=85&s=07bd61487e50e51ea28d175c966e4155 1650w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/LgymarlLDzodE3XF/docs/images/cdy7uua7fh8z/1AsaznhRKxm5LZxPlcbfUw/10e5a8af700aab909f5b03fcd266da7e/twilio-vault-connection.png?w=2500&fit=max&auto=format&n=LgymarlLDzodE3XF&q=85&s=93160580ac1bdfa67c2f9fa608e640eb 2500w" />
   </Frame>
4. Add a vault **Connection name** and select **Continue**.
5. Enter the credentials.
   If you don't have the specific credentials, you can select **Create an empty connection** and add the credentials later. Empty connections have an orange icon indicating missing credentials.

   <Frame>
     <img src="https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/sIfaDcVcEybOrBru/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?fit=max&auto=format&n=sIfaDcVcEybOrBru&q=85&s=50102d16bed166131b4d86e07982b4f1" alt="Dashboard > Forms > Vault > Twilio connection settings" data-og-width="1369" width="1369" data-og-height="491" height="491" data-path="docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/sIfaDcVcEybOrBru/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?w=280&fit=max&auto=format&n=sIfaDcVcEybOrBru&q=85&s=bae4fb14d9cc8f3f4f8da2df638038a8 280w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/sIfaDcVcEybOrBru/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?w=560&fit=max&auto=format&n=sIfaDcVcEybOrBru&q=85&s=682d6216254dc7a71a30c3b0578f3601 560w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/sIfaDcVcEybOrBru/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?w=840&fit=max&auto=format&n=sIfaDcVcEybOrBru&q=85&s=6f0403f7323bda122312a04358f9f47b 840w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/sIfaDcVcEybOrBru/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?w=1100&fit=max&auto=format&n=sIfaDcVcEybOrBru&q=85&s=047da143b89fa0c19da0e31922ff406a 1100w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/sIfaDcVcEybOrBru/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?w=1650&fit=max&auto=format&n=sIfaDcVcEybOrBru&q=85&s=6b34fbf135f8666a51866c71106ad93a 1650w, https://mintcdn.com/docs-dev-privilege-worker-scope-pinning/sIfaDcVcEybOrBru/docs/images/cdy7uua7fh8z/yobXanutPRCO3FWek8cOk/bc29e39fb8593cff35e2738234bfe6fe/twilio-vault-settings.png?w=2500&fit=max&auto=format&n=sIfaDcVcEybOrBru&q=85&s=5fc57b87264365936baf597ce7582b76 2500w" />
   </Frame>
6. Select **Add Vault Connection.**
