A token is a string of randomized characters that is used to identify users within Anaconda. Your token provides you with access to your subscription tier’s capabilities and features within Anaconda.com. There are two types of tokens used by Anaconda:
  • Organization access token: Your organization access token provides you with the ability to connect to your organization’s channels to install packages in your environments. Each user in an organization has a unique token, unless your organization is using a site token for access. Organization access tokens expire either 30 days after your organization’s subscription has ended or immediately when your subscription is canceled.
  • Service account token: Service accounts allow you to interact with your organization using the Anaconda.com public API. Generating a service account provides you with both a unique client ID and client token (also called a client secret). For more information, see Service accounts.

​
Issuing and setting your token

You must be assigned a seat within your organization to issue yourself a token.If you do not have a seat assigned, speak with your organization administrator. Once you’ve been assigned a seat, you can issue a token for yourself at any time.
There are three methods for issuing and setting your organization access token:
This is the recommended method for issuing and setting your token.
If your organization uses a site token, set your token using the conda-token CLI method instead. If you’re unsure whether or not your organization uses a site token, speak with your organization administrator.
  1. Open Anaconda Prompt (Terminal on macOS/Linux).
  2. Verify that you have anaconda-auth installed by running the following command: 
    anaconda auth --version
    If you do not have anaconda-auth installed, see Installing anaconda-auth.
  3. Issue and set your token by running the following command: 
    anaconda token install
    This command initiates a sign-in workflow in a browser window. If you are already signed in, authentication is automatically completed. If you are not signed in, you are prompted to sign in with your Anaconda.com credentials.If your company has set up SSO, you are redirected to your company’s SSO login page.
    If you belong to more than one organization, use the arrow keys to select the organization you want to issue and set a token for.
    This command also configures your .condarc file to use Anaconda’s curated repository channels at repo.anaconda.cloud.
  4. Return to your terminal and follow the prompts to complete the workflow.

​
Reissuing a token

  1. Navigate to your Organizations page.
  2. Under Org Management, select Token Access.
  3. Click Reissue token. Your new token displays until copied. An automated email containing your new token is also delivered to the email address associated with your Anaconda account.
Re-issuing your token invalidates your previous token. All newly generated tokens are set to expire when your organization’s subscription expires.
Remember to set your token using Anaconda Navigator or the conda-token CLI!

​
Synchronizing your token

Tokens have a lifespan that is tied to your organization’s subscription; however, renewing your subscription does not automatically extend the lifespan of your token. If you’ve renewed your subscription and want to retain your current token, synchronize your token to extend its lifespan to your organization’s new subscription expiration date. To synchronize your token:
  1. Go to your organization’s page.
  2. Under Org Management, select Token Access.
  3. Click Sync token.

​
Token storage

Your organization access token is securely stored in your system’s local files but gets saved in different locations based on which method you use to set your token.
If you set your token using the anaconda token install command, your token is stored in the anaconda-keyring location:
C:\Users\<USER_NAME>\.anaconda\keyring

​
Site tokens

A site token is an organization access token that is used by the entire organization. This one access token can authenticate any organization member to the curated Anaconda repository and your organization’s channels. Site tokens are issued/reissued and synced in a manner similar to individual access tokens, though only administrators have permission to do so, and no email is issued to deliver the token. Instead, your site token only displays in the browser when issued/reissued.
Save your token somewhere secure! Once you close the window, the token is no longer accessible.
Distribute this token to your organization members in a secure fashion, and have them set the token using the conda-token CLI.
Reissuing a site token invalidates the previous token. The new token needs to be distributed to all organization members, who must set the new token to regain access to the curated Anaconda repository and your organization’s channels.
Users no longer need to be assigned a seat in your organization to use your organization’s site token.
If you are interested in purchasing a site token, please contact Anaconda at [email protected].