Skip to main content

Documentation Index

Fetch the complete documentation index at: https://infisical.com/docs/llms.txt

Use this file to discover all available pages before exploring further.

Infisical supports connecting to a remote Infisical instance using a Machine Identity (Universal Auth). This enables you to sync secrets from one Infisical project to another — for example, from your cloud instance to a self-hosted deployment.

​
Setup Infisical Connection in Infisical

1

Navigate to the remote Infisical instance

Open the remote Infisical instance (the one you want to sync secrets to) and navigate to Organization > Access Control > Machine Identities.Machine Identities Tab
2

Create a Machine Identity

Create a new Machine Identity. Give it a descriptive name (e.g., infisical-sync-identity).Create Machine Identity
3

Configure Universal Auth

Select Universal Auth as the authentication method and create the identity.Configure Universal Auth
4

Copy the Client ID and create a Client Secret

Copy the Client ID. Then click Create Client Secret and copy the generated secret. Store both values in a secure location — the secret will not be shown again.Copy Client Credentials
5

Add the Machine Identity to the target project

Navigate to the project on the remote instance that you want to sync secrets to. Under Project Settings > Access Control > Machine Identities, add the Machine Identity you created and grant it a role with write permission on secrets (e.g. Member or a custom role with secret write access).Add Identity to Project
6

Navigate to App Connections in Infisical

Switch back to your source Infisical instance. Navigate to Organization > App Connections and click Add Connection.App Connections Tab
7

Select the Infisical Connection option

Choose the Infisical option from the connection list.Select Infisical Connection
8

Fill in the connection form

Complete the connection form with the following details:
  • Instance URL: The base URL of the remote Infisical instance (e.g., https://infisical.example.com).
  • Machine Identity Client ID: The Client ID copied in a previous step.
  • Machine Identity Client Secret: The Client Secret copied in a previous step. Infisical Connection Form
9

Connection Created

Your Infisical Connection is now available for use in Secret Syncs.Connection Created