...
- A confidential credential linked to a specific client_id.
- Acts like a temporary password for machine-to-machine authentication.
- Required when requesting a bearer token to connect to the WMDA APIs.
- Expires after a set period. A replacement must be created and used.
- Can be managed by your organisation in on the Self Service API Credentials Portal Manage API credentials page (see 4. Managing your client secrets below).
...
| Warning |
|---|
Client_id stays the same permanently. It does not expire and does not need to be replaced. Client_secrets expire after a set period. When the client_secret expires, API connections will stop working until a new secret is created and updated in your systems. To avoid interruptions, always rotate the secret before it expires. See 5. Email Notifications About Expiring Client Secrets below |
2. Applications
...
on the
...
Manage API
...
credentials page:
The Self Service API Credentials Portal Manage API credentials page lists the applications created by the WMDA IT team for your organisation. Each application represents access to one or more APIs.
Examples of applications you may see in on the Self Service API Credentials PortalManage API credentials page:
- Partner-NL-OrganisationName-DM
Partner-NL-OrganisationName-SMC
PartnerAlternative-NL-OrganisationName-SMC (sandbox only)
...
Each application has its own client_id and client secrets. Visibility depends on your user role (see 3. Access to the Portal below) and the API permissions assigned to your application.
3. Access to the
...
Manage API
...
credentials page
You can manage client secrets using the Self Service API Credentials PortalManage API credentials page, where you can view, create, and delete client secrets.
To access the portalpage:
- You must have the appropriate user role (
credential manager) provided by the WMDA team. - Login to the portal using MFA (MFA user guide).
- Visit the page https://portal.wmda.info/manage-clients.
...
4. Managing your client secrets
As credential manager you you can use the Self Service API Credentials Portal the Manage API credentials page to:
- View the applications and their client_ids provided by the WMDA.
- Create new client secrets for these applications.
- See expiration date for each client secret.
- Delete client secrets.
...
These reminders are sent only to users who have been granted access to the Self Service API Credentials PortalManage API credentials page.