Resource access credential security is improved by providing authentication tools and techniques which do not rely on embedment of credentials in the source code or configuration files of programs that use the credentials to access secured resources. A program under development in a development tool determines through the operation of authentication code that it is under development and that a developer identity is to be used to obtain access credentials, instead of using an identity of the program itself as occurs when the program is not under development. The development tool may be stand-alone, or may be in an integrated development environment, and may be extensible or not. The program may be an application, a web service, or other software, and may be deployed to a cloud or other networked environment. Authentication may be based on a selected developer identity or selected account or other subscriber data.