A token is a string of randomized characters that is used to identify users within Anaconda. Your token provides you with access to your subscription tier’s capabilities and features within Anaconda.com. There are two types of tokens used by Anaconda:
  • Organization access token: Your organization access token provides you with the ability to connect to your organization’s channels to install packages in your environments. Each user in an organization has a unique access token, unless your organization is using a site token for access. Organization access tokens expire either 30 days after your organization’s subscription has ended or immediately when your subscription is canceled.
  • Service account token: Service accounts allow you to interact with your organization using the Anaconda.com public API. Generating a service account provides you with both a unique client ID and client token (also called a client secret). For more information, see Service accounts.

​
Issuing and setting your token

You must be assigned a seat within your organization to issue yourself a token. If you have not been assigned a seat, speak with your organization administrator.
Use one of the following methods to issue and set your organization access token:
  • If you are issuing a token for the first time or need to issue a new token, use the anaconda-auth CLI method.
  • If you prefer to use applications with a user interface, issue your token from Anaconda.com and set it with Anaconda Navigator.
  • If a token has been provided to you, set it using the conda-token CLI method.
Issuing a token using anaconda-auth automatically sets the token for you.
  1. Open Anaconda Prompt (Terminal on macOS/Linux).
  2. Verify that you have anaconda-auth installed by running the following command: 
    anaconda auth --version
    If you do not have anaconda-auth installed, see Installing anaconda-auth.
  3. Issue and set your token by running the following command: 
    anaconda token install
    This command initiates a sign-in workflow in a browser window. If you are already signed in, authentication is automatically completed. If you are not signed in, you are prompted to sign in with your Anaconda.com credentials.If your organization has configured SSO, you are redirected to your company’s SSO login page.
    If you belong to more than one organization, use the arrow keys to select the organization you want to issue and set a token for.
    This command also configures your .condarc file to use Anaconda’s curated repository channels at repo.anaconda.cloud.
  4. Return to your terminal and follow the prompts to complete the workflow.

​
Reissuing a token

You can reissue a token using anaconda-auth or from your Anaconda.com organization.
Reissuing a token invalidates your previously issued token.
  1. Open Anaconda Prompt (Terminal on macOS/Linux).
  2. Issue and set a new token: 
    anaconda token install
All newly issued tokens are set to expire when your organization’s subscription expires.

​
Synchronizing your token

Tokens have a lifespan that is tied to your organization’s subscription; however, renewing your subscription does not automatically extend the lifespan of your token. If you’ve renewed your subscription and want to retain your current token, synchronize your token to extend its lifespan to your organization’s new subscription expiration date. To synchronize your token:
  1. Go to your organization’s page.
  2. Under Org Management, select Token Access.
  3. Click Sync token.

​
Token storage

Your organization access token is securely stored in your system’s local files but gets saved in different locations based on which method you use to set your token.
If you set your token using the anaconda token install command, your token is stored in the anaconda-keyring location:
C:\Users\<USER_NAME>\.anaconda\keyring

​
Site tokens

A site token is an organization access token that is used by the entire organization. This one access token can authenticate any organization member to the curated Anaconda repository and your organization’s channels. Site tokens are issued/reissued and synced in a manner similar to individual access tokens, though only administrators have permission to do so, and no email is issued to deliver the token. Instead, your site token only displays in the browser when issued/reissued.
Save your token somewhere secure! Once you close the window, the token is no longer accessible.
Distribute this token to your organization members in a secure fashion, and have them set the token using conda-token.
Reissuing a site token invalidates the previous token. The new token needs to be distributed to all organization members, who must set the new token to regain access to the curated Anaconda repository and your organization’s channels.
Users no longer need to be assigned a seat in your organization to use your organization’s site token.
If you are interested in purchasing a site token, please contact Anaconda at [email protected].