Credentials used by vRO platform itself (eg. credentials used to connect to the database) are encrypted and stored into vRO configuration files. Credentials used by vRO plug-ins to connect and communicate with external systems are encrypted and stored in the database. This is not enforced, though, so some older 3rd party plug-ins may still store their credentials into a file. Credentials provided by the user, eg. to login to vRO client or to run a workflow on behalf of some user, are exchanged for SAML or OAuth tokens, which then can be stored in the database.
Encryption algorithm is 256-bit AES.
