...
As credential manager you can use the Manage API Credentials page to:
- View the applications application registrations and their client ID provided ID provided by the WMDA.
- Create new client secrets for these applicationsapplication registrations.
- See expiration date for each client secret.
- Delete client secrets.
...
2. About API Credentials
WMDA IT team creates applications application registrations for your organisation to facilitate the identification and procurement of stem cell products from around the world. To maintain secure access to these applications application registrations, the WMDA provides the API Credentials (client ID and client secret) needed to connect to WMDA APIs. Each application registration has a client ID ID (which is permanent) and requires a client secret to authenticate.
...
- Created by the WMDA and shared with your organisation.
- Identifies your application registration connection to the WMDA APIs.
- Permanent - it does not expire and cannot be changed.
...
| Warning |
|---|
Client ID stays the same permanently. It does not expire and does not need to be replaced. Client secret expires after a set period. When the client secret expires, API connections will stop working until a new secret is created and updated in your systems. To avoid interruptions, always rotate the secret before it expires. See 4. Email Notifications About Expiring Client Secrets below |
3.
...
Application Registration on the Manage API Credentials Page
The Manage API Credentials page lists the applications application registrations created by the WMDA IT team for your organisation. Each application registration represents access to one or more APIs.
Examples of applications application registrations you may see on the Manage API Credentials page:
...
Depending on the API permissions assigned to your application registration, it may have access to the following WMDA resources:
...
| Info |
|---|
PartnerAlternative is a "dummy" organisation application registration for implementers to test their Match-Connect API integration internally. It works only in the Match-Connect sandbox and is provided upon request. |
Each application registration has its own client ID and client secret. Visibility depends on your user role and the API permissions assigned to your application registration by the WMDA team.
4. Email Notifications About Expiring Client Secrets
...
These reminders are sent only to users who have the appropriate user role (credential manager) assigned by the WMDA team.