---
title: Secrets hubs
description: Connect external vaults to PingOne Privilege as secrets hubs for secrets management.
component: privilege
page_id: privilege:integrations:secrets-hubs/index
canonical_url: https://docs.pingidentity.com/privilege/integrations/secrets-hubs/index.html
llms_txt: https://docs.pingidentity.com/privilege/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: September 11, 2026
section_ids:
  supported-secrets-hubs: Supported secrets hubs
---

# Secrets hubs

PingOne Privilege can use external vaults as secrets hubs, enabling administrators to control and manage access to secrets stored within those external vaults. Users can check out these secrets based on granular policy. Every secret use is recorded as an audit event with the secret name as metadata.

## Supported secrets hubs

![](../_images/p1p-integrations-aws-secrets-manager.svg)

#### [AWS Secrets Manager](aws-secrets-manager.html)

Connect AWS Secrets Manager to PingOne Privilege as a secrets hub for secure credential injection into privileged sessions.

![](../_images/p1p-integrations-azure.svg)

#### [Azure Key Vault](azure-key-vault.html)

Connect Azure Key Vault to PingOne Privilege as a secrets hub for secure credential injection into privileged sessions.

![](../_images/p1p-integrations-delinea.svg)

#### [Delinea Secret Server](delinea-secret-server.html)

Connect Delinea Secret Server to PingOne Privilege as a secrets hub for secure credential injection into privileged sessions.

![](../_images/p1p-integrations-gcp.png)

#### [GCP Secrets Manager](gcp-secrets-manager.html)

Connect GCP Secrets Manager to PingOne Privilege as a secrets hub for secure credential injection into privileged sessions.