Gainsight extended KMS encryption and masking of saved secrets to its Salesforce, S3, Slack, Databricks, Snowflake and DataSphere connectors. Saved credentials no longer display when an admin edits a connection, and rotation is done by overwriting the masked value. In the same fortnight its Skilljar academy product made multiple login methods a self service setting, where they used to be a Professional Services add on.
Credentials that show on an edit screen are a classic audit finding, and existing connections do not need to be rebuilt, so this is a security gain with no migration work. The Skilljar change removes a services engagement from what should always have been a setting.