# Passing credential into Powershell - interpolation challenges **URL:** \ **Category:** Ask a question\ **Created:** [March 11, 2025, 11:38pm UTC](https://community.jenkins.io/t/passing-credential-into-powershell-interpolation-challenges/28111 "2025-03-11T23:38:06Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![hukel](https://avatars.discourse-cdn.com/v4/letter/h/f4b2a3/32.png) [@hukel](https://community.jenkins.io/u/hukel)\ **Post date:** [March 11, 2025, 11:38pm UTC](https://community.jenkins.io/t/passing-credential-into-powershell-interpolation-challenges/28111/1 "2025-03-11T23:38:06Z")
I am trying to send a credential into the Run-ScriptBlockImpersonated command below. I am new to Jenkins (Version 2.492.2 on Windows) and cannot seem to get the password in as a variable. Any glaring errors here? ```auto pipeline { agent any stages { stage('Cred Test') { steps { withCredentials([usernamePassword(credentialsId: 'CREDNAME', passwordVariable: 'impersonation_userpw', usernameVariable: 'impersonation_username')]) { echo pwsh(returnStdout: true, script: ''' . $PROFILE $pw = $env:impersonation_userpw Write-Host $PW.length Write-Host $env:impersonation_userpw.length Write-Host "Run-ScriptBlockImpersonated -Username $env:impersonation_username -Password $($env:impersonation_userpw) -LogonType 4" ``` ---
**Author:** ![hukel](https://avatars.discourse-cdn.com/v4/letter/h/f4b2a3/32.png) [@hukel](https://community.jenkins.io/u/hukel)\ **Post date:** [March 12, 2025, 11:58am UTC](https://community.jenkins.io/t/passing-credential-into-powershell-interpolation-challenges/28111/2 "2025-03-12T11:58:52Z")
I’ve tried some other variations. From everything I see, my environment/shell variable (at the process level) is being set to “\*\*\* Not Valid For Display \*\*\*”, so no matter how I access it from with the script, the actual value isn’t available. ```auto pipeline { agent any stages { stage('Cred Test') { steps { withCredentials([usernamePassword(credentialsId: 'xxxx', passwordVariable: 'impersonation_userpw', usernameVariable: 'impersonation_username')]) { pwsh(returnStdout: true, script: ''' # . $PROFILE $pw = \$env:impersonation_userpw Write-Warning "# $pw" Write-Host $(Get-ChildItem Env: | %{ $len = [Math]::Min(10,$_.Value.Length) "{0}`t{1}....`r`n" -f $_.Name,$_.Value.substring(0,$len)} ) ``` The variable dump in that build just shows: ```auto HUDSON_HOME C:\data\Je.... HUDSON_SERVER_COOKIE 015d679e37.... HUDSON_URL http://loc.... impersonation_username svc-se...... impersonation_userpw *** Not Va.... JAVA_HOME C:\Program.... JENKINS_HOME C:\data\Je.... JENKINS_NODE_COOKIE 4573f16f-0.... JENKINS_SERVER_COOKIE durable-bf.... JENKINS_URL http://loc.... JOB_BASE_NAME Pipeline D.... ``` ---
**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\ **Post date:** [March 12, 2025, 12:55pm UTC](https://community.jenkins.io/t/passing-credential-into-powershell-interpolation-challenges/28111/3 "2025-03-12T12:55:06Z")
hmm I tried it on windows with `powershell` step instead of `pwsh` and that works just fine. The String ` ***Not Valid For Display*** ` is not coming from Jenkins or any of the plugins I think , so don’t know what the problem might be. Is that credential one that is coming via thycotic or is it a plain username/password credential in Jenkins ---
**Author:** ![hukel](https://avatars.discourse-cdn.com/v4/letter/h/f4b2a3/32.png) [@hukel](https://community.jenkins.io/u/hukel)\ **Post date:** [March 12, 2025, 3:57pm UTC](https://community.jenkins.io/t/passing-credential-into-powershell-interpolation-challenges/28111/4 "2025-03-12T15:57:11Z")
It is coming from Thycotic. Are there different rules for that? ---
**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\ **Post date:** [March 12, 2025, 5:28pm UTC](https://community.jenkins.io/t/passing-credential-into-powershell-interpolation-challenges/28111/5 "2025-03-12T17:28:26Z")
Don’t know, I found the String ` ***Not Valid For Display*** ` in the context of thycotic, so my assumption is that you’re not allowed to use that password from thycotic in this way. You could check if the problem is the same when you use a freestyle project and try to use that secret there. And then create a normal credential in Jenkins and check if this works. ---
**Author:** ![hukel](https://avatars.discourse-cdn.com/v4/letter/h/f4b2a3/32.png) [@hukel](https://community.jenkins.io/u/hukel)\ **Post date:** [March 13, 2025, 11:24am UTC](https://community.jenkins.io/t/passing-credential-into-powershell-interpolation-challenges/28111/6 "2025-03-13T11:24:50Z")
> [@hukel](#): > > Version 2.492.2 on Windows) and cannot seem to get the password in as a variable. Yes, this is definitely related to the Thycotic plugin. Thank you for that tip. Where had you seen this mentioned before? I’ve opened [https://issues.jenkins.io/browse/JENKINS-75422](https://issues.jenkins.io/browse/JENKINS-75422) but will close it if this is open elsewhere. **Normal/Jenkins-stored username+password:** Password’s first few characters revealed if I print the variables: ```auto HUDSON_URL http://loc.... impersonation_username netspar.... impersonation_userpw S%0E-fM.... ``` **Thycotic plugin password:** ```auto HUDSON_URL http://loc.... impersonation_username svc-secops.... impersonation_userpw *** Not Va.... ``` ---
**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\ **Post date:** [March 13, 2025, 8:29pm UTC](https://community.jenkins.io/t/passing-credential-into-powershell-interpolation-challenges/28111/7 "2025-03-13T20:29:49Z")
[https://docs.delinea.com/online-help/web-pasword-filler-3-6-x/resources/pdf/web-password-filler-3.6.x.pdf](https://docs.delinea.com/online-help/web-pasword-filler-3-6-x/resources/pdf/web-password-filler-3.6.x.pdf) ---
**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\ **Post date:** [March 13, 2025, 9:06pm UTC](https://community.jenkins.io/t/passing-credential-into-powershell-interpolation-challenges/28111/8 "2025-03-13T21:06:31Z")
btw I guess it’s not directly the plugin that sets this value but when the plugin communicates with the thycotic secret server, it gets this as the value for the password. ---
**Author:** ![hukel](https://avatars.discourse-cdn.com/v4/letter/h/f4b2a3/32.png) [@hukel](https://community.jenkins.io/u/hukel)\ **Post date:** [March 24, 2025, 9:02pm UTC](https://community.jenkins.io/t/passing-credential-into-powershell-interpolation-challenges/28111/9 "2025-03-24T21:02:24Z")
@mawinter69 , you are correct. I ultimately learned that Secret Server was masking the password because I had this combination of settings applied to the secret: - a “launcher” was configured on the secret template - the secret policy was set to “Hide launcher password" Once I removed the launcher from the secret, Secret Server coughed up the password.