credential retrieval