When you enable a secrets manager for a sub-organization, ensure that the SecretManagerApp service is running on a Secure Agent that is native to the sub-organization. If the SecretManagerApp service runs on a Secure Agent that is shared from the parent organization, it can only connect to the secrets manager that is configured for the parent organization. It can't connect to the secrets manager that is configured for the sub-organization.

For more information about the SecretManagerApp Secure Agent service, see

Secure Agent Services

.