We use TeamCity (Version 8) to manage our builds, trigger octopus deployments and finally execute integration tests against our deployed services. In the case of the integration tests, we want to avoid storing usernames and passwords in source control but would be happy to allow TeamCity to pass this information when the unit tests are run by the MSTest runner.
How can we pass (safely) passwords, urls and usernames stored only in team-city? Is this good practise or is there a better way to do this?