DashboardAuthentication
Client Credentials
Create static username/password pairs for dedicated MQTT connections
Client credentials are static username/password pairs that you create in the dashboard. They don't expire and are best suited for dedicated devices or development/testing.
Creating Client Credentials
- Navigate to Dashboard → Authentication
- In the Other Methods section, click Client Credentials
- Click Create Client
- Enter a username and password
- Optionally assign an ACL rule set
- Click Create
The client can now connect using:
| Parameter | Value |
|---|---|
| Username | your_username@org_short_id |
| Password | The password you set |
The @org_short_id suffix is appended automatically. When connecting, use the full format: username@org_short_id.
Managing Clients
From the Client Credentials page you can:
- View all clients with their status and assigned ACL rule set
- Edit a client to change the display name or ACL rule set
- Delete a client to permanently revoke access
Best Practices
- Use descriptive usernames (e.g.,
sensor-floor-3,gateway-building-a) - Use strong, unique passwords for each client
- Assign specific ACL rule sets to limit topic access
- Rotate credentials periodically by creating a new client and deleting the old one
- For production applications, prefer Auth Providers or Token Auth over static credentials
When to Use
- Dedicated hardware devices with stable, long-running connections
- Development and testing environments
- Simple setups where managing an identity provider is unnecessary