Question

You are developing a Dataverse plug-in that calls an external REST service requiring an API key. The plug-in will be registered on the same step across your development, test, and production environments, and each environment uses a different API key. You must store the key so it is not exposed to system administrators viewing the plug-in step, and so the value can differ per environment when the solution is imported. Which approach should you use?

Accepted Answer

Pass the API key in the secure configuration parameter when registering the plug-in step, and read it from the constructor's second string argument.

Answer

Pass the API key in the unsecure configuration parameter and read it from the constructor's first string argument.

Answer

Hard-code the API key as a constant in the plug-in class and recompile the assembly separately for each environment.

Answer

Store the API key in the plug-in's shared variables collection so it is passed through the execution context at runtime.