THE IMPLEMENTATION OF A METHOD FOR WORKING WITH SENSITIVE DATA USED BY VARIOUS SERVICES AND SYSTEMS

The article describes the method of working with sensitive data used by various services and systems, including CRM/ERM systems, as well as the implementation of storing this data using the classic .NET FRAMEWORK. The main driver of this initiative is a missing centralized repository for connection strings to various systems like databases, CRM/ERM systems (for example. Netsuite or Salesforce), system variables, other sensitive info (for example tokens), and third-party components. The problem here is that each application has stored these connection strings in its configuration (usually in the web. config). It means one connection string is multiplied in many places and if there is a change in credentials, for example, the change must be done in all these application configurations. Finally, it would be better to have any registry of which connection string is used where. This is adding complexity for global updates, and it also doesn't help with security (since credentials to production systems are in the configuration and thus in source control, where they are visible to anybody).