Credential matcher