> ## Knowledge Base Index > Fetch the complete knowledge base index at: https://help.superpath.io/sitemap.xml > Use this file to discover available pages before exploring further. > Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash). # How to Manage Your Partner Credentials and Domains # How to Manage Your Partner Credentials and Domains **In this article:** * Overview * How to find your Partner ID * How to reveal your partner secret * How to rotate your partner secret * How to set the domains for new accounts * What SuperPath manages for you * Things to keep in mind * FAQs * Who can do this ## Overview The **Developer** tab in your Partner Settings holds everything your own platform needs to connect to SuperPath: your **Partner ID**, your **partner secret**, and the web addresses used for links and sign-in in the customer accounts you create. It also shows the settings SuperPath manages on your behalf, such as your custom domain, your email sender and which of your sites may embed SuperPath learning. Your integration uses the Partner ID and partner secret to sign people in to their accounts automatically and to open embedded learning. See [Implementing Auto Login for Partners](https://help.superpath.io/en/article/implementing-auto-login-for-partners-jpvex/) and *Embedding the Pathway and Assignment Players in Your App*. To open it, go to **Partner Portal → Settings** and click the **Developer** tab. ## How to find your Partner ID Your **Partner ID** is shown at the top of the **Partner credentials** card. Click the copy icon next to it to copy it. It never changes. ## How to reveal your partner secret The partner secret is hidden by default. 1. In the **Partner credentials** card, click **Reveal** next to **Partner secret**. 2. The secret is shown for 60 seconds. Click the copy icon to copy it. 3. After 60 seconds, or when you leave the page, it is hidden again. SuperPath records each reveal with your name and the time. > **Note:** Keep the secret on your servers only. Never put it in an app, a web page, a public code repository or an email. ## How to rotate your partner secret Rotate the secret if you think it has been exposed, or as part of your own security routine. Rotating creates a new secret straight away, and **the old one stops working**. Every sign-in link and embedded learning link your integration signs with the old secret fails until your integration uses the new one, for every one of your customer accounts. 1. Plan the change so you can put the new secret into your integration straight away. 2. In the **Partner credentials** card, click **Rotate secret**. 3. The **Rotate partner secret** window shows how many of your customer accounts depend on the secret. 4. Type **ROTATE** in the box to confirm, then click **Rotate secret**. 5. The **New secret created** window shows the new secret. Click the copy icon, and put it into your integration now. You can reveal the new secret again later from the same card. ## How to set the domains for new accounts The **Domains for new accounts** card sets two addresses that are copied into each customer account you create: * **Email link domain:** the base address used for links inside emails, for example `https://learning.partnername.com`. * **Custom login domain:** where people are sent to sign in, for example `https://www.partnername.com/login`. 1. Enter one or both addresses. 2. Click **Save domains**. These are copied to accounts you create **after** you save. Accounts that already exist keep their own values, which you can change in each account's settings. ## What SuperPath manages for you The **Managed by SuperPath** card shows three settings that need work on SuperPath's side, so you can see them here but not change them. Contact SuperPath support to set up or change any of them. * **Custom domain:** the web address your customer accounts use, with an **Active** or **Off** badge. * **Email sender:** the address emails for your customer accounts are sent from, with an **Active** or **Off** badge. Until it is active, emails come from SuperPath's default address. See *Sending Emails From Your Own Domain*. * **Embedded learning:** the sites allowed to embed the Pathway and assignment players. If none are listed, it says "Embedding is off. Contact support to turn it on." See *Embedding the Pathway and Assignment Players in Your App*. ## Things to keep in mind * Rotating the secret affects every customer account at once, and cannot be undone. There is only ever one partner secret, so your integration has to switch to the new one as soon as you rotate. * If you reveal or rotate the secret many times in a short period, you will be asked to wait and try again a little later. * Saving the domains only affects accounts you create afterwards. * The partner secret is only ever shown on this tab, to Owners and Admins of your partner account. No other page or API response includes it. ## FAQs **I have lost the partner secret. What do I do?** Click **Reveal** on the **Developer** tab to see it again. You only need to rotate it if you think someone else has seen it. **Will rotating the secret sign anyone out?** People who are already signed in stay signed in. New sign-in links and embedded learning signed with the old secret fail until your integration uses the new one. **Why can't I change my custom domain or email sender here?** Each needs set-up work on SuperPath's side, such as DNS or email verification, so they are managed by SuperPath. Contact SuperPath support. **I changed the email link domain but an existing account still uses the old one. Why?** The domains are only copied into accounts when they are created. Change the existing account's own settings instead. ## Who can do this **Owners** and **Admins** of a Partner account can open the **Developer** tab, reveal and rotate the partner secret, and save the domains. Other roles in the Partner account cannot open the Partner Portal and never receive the partner secret.