the page is not not public yet
1.
...
Manage Your Client Secrets
You can manage client secrets using the Manage API Credentials page, where you can view, create, and delete client secrets.
...
1.1 Access to the Manage API Credentials Page
- Visit the Manage API Credentials page https://portal.wmda.info/manage-clients.
- You must login to the portal using MFA (MFA user guide).
- You must have the appropriate user role (
credential manager) assigned by the WMDA team.
...
- View the applications and their client ID provided by the WMDA.
- Create new client secrets for these applications.
- See expiration date for each client secret.
- Delete client secrets.
...
1.2 Create a Client Secret
- Visit the Manage API Credentials page https://portal.wmda.info/manage-clients and click on the "Create new secret" button and the pop-up will appear:
...
Once a new client secret is in use, the old one should be removed to prevent unnecessary expiration reminders and confusion.
...
1.3 Delete a Client Secret
1. Click on the delete icon next to the secret you would like to delete and confirm your action:
...
1.4 Expiring Client Secrets
To inform credential managers about secrets that are about to expire, email notifications are sent. See 4. Email Notifications About Expiring Client Secrets below.
Client secret that is about to expire (in less than one month) is marked with an icon next to the expiration date on the Manage API Credentials page:
2. About API Credentials
WMDA IT team creates applications for your organisation to facilitate the identification and procurement of stem cell products from around the world. To maintain secure access to these applications the WMDA provides the API Credentials (client ID and client secret) needed to connect to WMDA APIs. Each application has a client ID (which is permanent) and requires a client secret to authenticate.
...
| Warning |
|---|
Client ID stays the same permanently. It does not expire and does not need to be replaced. Client secret expires after a set period. When the client secret expires, API connections will stop working until a new secret is created and updated in your systems. To avoid interruptions, always rotate the secret before it expires. See 4. Email Notifications About Expiring Client Secrets below |
3. Applications on the Manage API Credentials
...
Page
The Manage API Credentials page lists the applications created by the WMDA IT team for your organisation. Each application represents access to one or more APIs.
...
Each application has its own client ID and ID and client secret. Visibility depends on your user role (see 3. Access to the Portal below) and the API permissions assigned to your application by the WMDA team.
4. Email Notifications About Expiring Client Secrets
The designated contact(s) (credential manager) for your organisation will automatically receive email notifications from WMDA when a client secret is approaching expiration.
...