Masked type variable usage for Service Catalog

Overview

The Masked type variable in Service Catalog is used for storing sensitive or confidential information. (Note that although these variables are encrypted, they are not related to Encryption Support.) This article describes how to use and decrypt them.

For more information about Masked variables, see the product documentation topic Variable types

Masked type variable setup

If you are using a Masked type variable for a catalog item, you would also create another variable of type Single Line Text. The Masked variable (named "A") will be shown in catalog item and request item records. The Single Line Text variable (named "B") will be hidden at the catalog item record but shown in the request item record so that the user can enter the confidential information.

To decrypt Variable A and populate the values to Variable B running on Request Item table, you would create a Before Insert or Update business rule. Create a business rule with the following parameters:

Name: Name of the business rule

• Table: sc_req_item
• Active: True
• When: Before
• Insert: True
• Update: True

On the Advanced tab:

• Condition: current.cat_item == <sys_id of the catalog item>
• Script:
  

  (function executeRule(current, previous /*null when async*/) { 
  
  
  // Add your code here
  
   current.variables.B = current.variables.A.getDecryptedValue(); //current.variables.<variable name>
  
  
  })(current, previous)