Credentials saved for connection to cloud?

[jaymichaud]

When establishing a connection from on-premises Patch My PC Publisher to PMPC Cloud, credentials must be entered. (See https://docs.patchmypc.com/installation-guides/patch-my-pc-cloud/administration/manage-connections/add-a-connection.) Are those credentials stored on the on-premises server, or does the Publisher somehow generate a secure channel independent of those credentials? We are concerned about having a real user's account information saved on the PC running PMPC Publisher, and we can switch to a service account if needed. Thanks!

[Cody Mathis (Patch My PC)]

Hello,

These credentials are not stored locally. We use MSAL, provided by Microsoft, to authenticate to Entra. The token acquired is then used to communicate with our Patch My PC Cloud solution and perform the 'authentication dance' to acquire a token from our cloud service.

The credentials you provide are not stored in any part of this, outside of their use in memory as part of the MSAL authentication process as provided by Microsoft. There is no need to use a service account for this.

[jaymichaud]

Thank you!