SODa SCS Service Keys
Service Keys are authentication credentials that allow applications and external services to securely access SODa SCS resources. The Service Keys administration area manages all API keys, tokens, and credentials across the platform.
What You Can Do
- View all active service keys in the system
- Generate new service keys for applications or integrations
- Revoke compromised or unused service keys
- Set expiration dates and access scopes for keys
- Monitor service key usage and access patterns
- Audit security events related to service keys
Managing Service Keys
To manage service keys:
- Navigate to Administration → SODa SCS Service Keys
- Review the list of all service keys and their associated applications
- Click "Add Service Key" to generate a new credential
- Specify the key's purpose, scope, and expiration
- Copy the generated key securely (it will only be shown once)
- Revoke keys immediately if they are compromised
Security Best Practices
- Use descriptive names: Clearly identify what each service key is used for
- Set expiration dates: Limit key lifetime to reduce security risks
- Rotate keys regularly: Update credentials on a schedule
- Revoke unused keys: Remove keys that are no longer needed
- Monitor usage: Watch for unusual access patterns
- Principle of least privilege: Grant only necessary permissions