SupportedCustomer-hosted deployment
Enterprise · Self-hostedVault Enterprise can be operated on customer-managed infrastructure. HCP Vault Dedicated is a different, managed deployment. The operator remains responsible for storage location, backups, availability and connected systems.
What is Vault? Deployment and storage ↗
Checked 2026-09-17SupportedEntra ID sign-in
Enterprise · Self-hostedHuman users can sign into Vault through Entra ID (called Azure AD in this guide) using OIDC. Configure the identity-provider application, callback URLs, roles and policy/group mappings. This is inbound Vault authentication, not an SSO service for other applications.
Vault authentication for people ↗
Enterprise self-managed deployment ↗
Checked 2026-09-17SupportedMachine identity
Enterprise · Self-hostedConfigured secrets engines issue short-lived machine credentials with leases and revocation; supported database engines can rotate static credentials. Target support, permissions and engine configuration determine coverage. Operate Vault Enterprise on customer-managed infrastructure. This does not establish estate-wide machine identity discovery or Boundary privileged-session features.
Vault dynamic credentials, leases and rotation ↗
Vault Enterprise self-managed secrets management ↗
Checked 2026-09-19SupportedVaulted machine secrets
Enterprise · Self-hostedConfigured secrets engines issue short-lived machine credentials with leases and revocation; supported database engines can rotate static credentials. Target support, permissions and engine configuration determine coverage. Operate Vault Enterprise on customer-managed infrastructure. This does not establish estate-wide machine identity discovery or Boundary privileged-session features.
Vault dynamic credentials, leases and rotation ↗
Vault Enterprise self-managed secrets management ↗
Checked 2026-09-19SupportedShort-lived credentials
Enterprise · Self-hostedConfigured secrets engines issue short-lived machine credentials with leases and revocation; supported database engines can rotate static credentials. Target support, permissions and engine configuration determine coverage. Operate Vault Enterprise on customer-managed infrastructure. This does not establish estate-wide machine identity discovery or Boundary privileged-session features.
Vault dynamic credentials, leases and rotation ↗
Vault Enterprise self-managed secrets management ↗
Checked 2026-09-19 Evidence reflects reviewed sources, not an independent product test. Sources older than 180 days need a fresh check. Unlisted support is unknown.