Credential stores for Password Reset

---
title: Credential stores for Password Reset
description: Credential stores hold user information such as user names and passwords that can be used as login credentials. Examples include the User table \[sys\_user\] or an Active Directory server.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/servicenow-platform/password-reset/c\_CredentialStores.html
release: brazil
product: Password Reset
classification: password-reset
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 4
breadcrumb: [Configure your Password Reset process, Configuring Password Reset, Password Reset, Manage service capabilities, Extend ServiceNow AI Platform capabilities]
---

# Credential stores for Password Reset

Credential stores hold user information such as user names and passwords that can be used as login credentials. Examples include the User table \[sys\_user\] or an Active Directory server.

Users with the password\_reset\_admin or password\_reset\_credential\_manager role can create and modify connections to credential stores.

## Credential store types installed with the base system

A credential store type is a set of workflows that specify how to connect to a credential store. Navigate to **Password Reset** > **Credential Store Types** to view the list of example credential stores that are based on the base-system types. The base system includes the following credential store types:

|Name|Description|
|----|-----------|
|Local ServiceNow Instance|Represents the current \(local\) ServiceNow instance.|

## Credential store types included in Store apps

<table id="table_mx5_cxy_bsb"><thead><tr><th>

Name

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Microsoft AD Credential Store

</td><td>

Represents a Microsoft Active Directory credential store. See [Set up Microsoft Active Directory for Password Reset](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/servicenow-platform/password-reset/setup-guide-ad.md).

</td></tr><tr><td>

Microsoft Entra ID Credential Store

</td><td>

Represents a Microsoft Entra ID credential store.

</td></tr><tr><td>

Okta credential store

</td><td>

Represents an Okta credential store.

</td></tr><tr><td>

Google credential store

</td><td>

Represents a Google Directory credential store.

</td></tr></tbody>
</table>## Connection subflows for credential store types

A credential store type workflow requires a subflow that defines how to connect to the store, and can include an optional subflow that defines how to test the connection. Use the **Pwd reset – AD** and **Pwd Reset - Local** subflows as models for your custom connection workflows.

\[Omitted image "PwdResetLocalServiceNowSubWorkflow.png"\] Alt text: Pwd Reset Local sub workflow

\[Omitted image "PwdConnectionTestLocalSNSubWorkflow.png"\] Alt text: Pwd connection test local SN sub workflow

## Creating a custom credential store type

You can use a credential store type as a model to create a custom type. See [Create a credential store type for Password Reset](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/servicenow-platform/password-reset/t_CreateACredentialStoreType.md).

-   **[Configure the connection to a credential store for the Password Reset processes](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/servicenow-platform/password-reset/t_CreateACredentialStore.md)**  
You create a Password Reset credential store record to configure access to your credential store server while a user is changing or resetting a password. In addition to host connection information, you can specify the password hints that users should see, restrictions on password reuse, the allowed number of failed reset attempts, and other settings.
-   **[Credentials Store for Password Reset for Active Directory](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/servicenow-platform/password-reset/credentials-store-AD.md)**  
A credential store type is a set of workflows that specify how to connect to a credential store. You can connect to **Password Reset** **Credential Stores** to view the list of example credential stores that are based on the base-system types.
-   **[Credential Store for Password Reset for Microsoft Entra ID](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/servicenow-platform/password-reset/credentials-store-micro-ad.md)**  
A credential store type is the set of flows to manage password and account of Microsoft Entra ID user. Navigate to **Password Reset** &gt; **Credential Stores** to view the list of example credential stores that are based on the base-system types.
-   **[Test the connection to a credential store](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/servicenow-platform/password-reset/test-cxn-to-credential-store.md)**  
You should test the connection to a credential store after you configure a new credential store or when users experience problems that might involve the connection.
-   **[Delete a connection to a credential store for Password Reset](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/servicenow-platform/password-reset/t_DeleteACredentialStore.md)**  
Important: Before you delete the connection to a credential store, check all Password Reset processes to ensure that the credential store is not in use. If the credential store is being used by a process, update the process before deleting the credential store.

**Parent Topic:**[Configure your Password Reset process](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/servicenow-platform/password-reset/t_CreateAPasswordResetProcess.md)

**Related topics**  


[Calculating the security score for password reset process]()

[Configure password expiration reminder]()

[Password Reset verifications]()

[Configure your Password Reset process to auto-enroll users]()

[Enable users to enroll for Password Reset]()

[Configure Password Reset properties]()

[Send email to remind users to enroll for Password Reset]()

[Configure the required strength for passwords]()

[Specify lockout for failed login attempts]()

[Configure Google reCAPTCHA for the password reset process]()