Skip to main content
All glossary terms

Credentials & security

Service binding

A service binding associates a stored credential or policy with a named service context, such as an approved upstream host or application. The binding defines where a secret may be used; its exact matching and enforcement behavior depend on the system implementing it.

Also known as credential binding.

Why it matters in practice

Bindings make secret use more specific than granting an application access to an unrestricted collection of credentials. They should be reviewed alongside destination matching, request fields, and the client identity that invokes them. A binding can reduce accidental cross-service use, but does not replace broader network and authorization controls.

Example

An administrator binds a credential to api.example.com, selects the Authorization header and Bearer format, then verifies the request uses that service binding.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.