Two layers of authentication are present for deploying the bots on remote Bot Runners.

The logged off, disconnected, and locked Bot Runner is logged on/connected/unlocked using the configured credentials. These credentials are fetched from the centralized Credential Vault over HTTPS. This first level of authentication is done against the Active Directory domain automatically, on behalf of the user and is called Bot Runner autologin.

After being authenticated, Bot Runners can be authorized to execute bots independently and asynchronously.