# Credential Providers

> This document provides a high-level description of Credential Providers

This section covers Credential Providers in Aembit, which you can use to provide access credentials to Client Workloads so they can access Server Workloads securely.

> **Reuse this in another Resource Set**
>
> You can copy a Credential Provider to another Resource Set. See [About component copying](/user-guide/administration/resource-sets/about-component-copying/) to learn more.

The following pages provide information about different Credential Provider types and how to configure them:

* [Aembit Access Token](/user-guide/access-policies/credential-providers/aembit-access-token)
* [API Key](/user-guide/access-policies/credential-providers/api-key)
* [AWS Secrets Manager](/user-guide/access-policies/credential-providers/aws-secrets-manager)
* [AWS Security Token Service Federation](/user-guide/access-policies/credential-providers/aws-security-token-service-federation)
* [AWS SigV4](/user-guide/access-policies/credential-providers/aws-sigv4)
* [Azure Entra Workload Identity Federation](/user-guide/access-policies/credential-providers/azure-entra-workload-identity-federation)
* [Azure Key Vault](/user-guide/access-policies/credential-providers/azure-key-vault)
* [Claude Workload Identity Federation](/user-guide/access-policies/credential-providers/claude-workload-identity-federation)
* [Google GCP Workload Identity Federation](/user-guide/access-policies/credential-providers/google-workload-identity-federation)
* [JSON Web Token (JWT)](/user-guide/access-policies/credential-providers/json-web-token)
* [JWT-SVID Token](/user-guide/access-policies/credential-providers/spiffe-jwt-svid)
* [Managed GitLab Account](/user-guide/access-policies/credential-providers/managed-gitlab-account)
* [MCP User-Based Access Token](/user-guide/access-policies/credential-providers/mcp-user-based-access-token)
* [OAuth 2.0 Authorization Code](/user-guide/access-policies/credential-providers/oauth-authorization-code)
* [OAuth 2.0 Client Credentials](/user-guide/access-policies/credential-providers/oauth-client-credentials)
* [OIDC ID Token](/user-guide/access-policies/credential-providers/oidc-id-token)
* [OpenAI API Workload Identity Federation](/user-guide/access-policies/credential-providers/openai-workload-identity-federation)
* [Username Password](/user-guide/access-policies/credential-providers/username-password)
* [Vault Client Token](/user-guide/access-policies/credential-providers/vault-client-token)
* [X.509-SVID](/user-guide/access-policies/credential-providers/spiffe-x509-svid)

### About Credential Providers

* [About JWT-SVID Tokens](/user-guide/access-policies/credential-providers/about-spiffe-jwt-svid)
* [About MCP User-Based Access Tokens](/user-guide/access-policies/credential-providers/about-mcp-user-based-access-token)
* [About OIDC ID Tokens](/user-guide/access-policies/credential-providers/about-oidc-id-token)
* [About X.509-SVID](/user-guide/access-policies/credential-providers/about-spiffe-x509-svid)

### Advanced options

* [Private Network Access](/user-guide/access-policies/credential-providers/private-network-access)
* [Multiple Credential Providers](/user-guide/access-policies/credential-providers/multiple-credential-providers)
* [HashiCorp Vault Dynamic Claims](/user-guide/access-policies/credential-providers/advanced-options/dynamic-claims-vault)
* [OIDC ID Token Dynamic Claims](/user-guide/access-policies/credential-providers/advanced-options/dynamic-claims-oidc)
* [Multiple Credential Providers Terraform](/user-guide/access-policies/credential-providers/advanced-options/multiple-credential-providers-terraform)

### Integrations

* [About Credential Provider Integrations](/user-guide/access-policies/credential-providers/integrations)
* [AWS IAM Role](/user-guide/access-policies/credential-providers/integrations/aws-iam-role)
* [Azure Entra Federation](/user-guide/access-policies/credential-providers/integrations/azure-entra-federation)
* [GitLab Dedicated Self-Managed](/user-guide/access-policies/credential-providers/integrations/gitlab-dedicated-self)
* [GitLab Service Account](/user-guide/access-policies/credential-providers/integrations/gitlab)