Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

warning the page is not not public yet

1. Introduction

WMDA IT team creates applications for your organisation and provides the client IDs API Credentials (client_id and client_secret) needed to connect to WMDA APIs. Each application has a client_id (permanent) and requires client secrets to authenticate.

...

Warning

Client_id stays the same permanently. It does not expire and does not need to be replaced.

Client_secrets expire after a set period.

When the client_secret expires, API connections will stop working until a new secret is created and updated in your systems.

To avoid interruptions, always rotate the secret before it expires. See 5. Email Notifications About Expiring Client Secrets below


2. Applications in the Self Service

...

API Credentials Portal:

The Self Service Client Secret Management API Credentials Portal lists the applications created by the WMDA IT team for your organisation. Each application represents access to one or more APIs.

Examples of applications you may see in the Self Service Client Secret Management API Credentials Portal:

  • Partner-NL-OrganisationName-DM
  • Partner-NL-OrganisationName-SMC

  • PartnerAlternative-NL-OrganisationName-SMC (sandbox only)

...

Each application has its own client_id and client secrets. Visibility depends on your user role (see 3. Access to the Portal below) and the API permissions granted to your application.

3. Access to the

...

Self Service API Credentials Portal

You can manage client secrets using the Self Service Client Secret Management Service API Credentials Portal, where you can view, create, and delete client secrets.

...

Info

Your organisation should designate one or more technical contacts (credential manager) who are responsible for managing client secrets.

Only designated users can be granted access.

Before contacting WMDA support, confirm internally who is responsible within your team.

If access is required, contact WMDA: support@wmda.info


4. Managing your client secrets

As credential manager you can use the Self Service Client Secret Management Service API Credentials Portal to:

  • View the applications and their client_ids provided by the WMDA.
  • Create new client secrets for these applications.
  • See expiration date for each client secret.
  • Delete client secrets.

...

1. Click on the delete icon next to the secret you would like to delete and confirm your action:


5. Email Notifications About Expiring Client Secrets

The designated contact(s) for your organisation will automatically receive email notifications from WMDA when a client secret is approaching expiration.

...

These reminders are sent only to users who have been granted access to the Self Service Client Secret Management API Credentials Portal.