Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

warning the page is not not public yet

Who is it for?

This guide is intended for technical contacts at WMDA member organisations who manage API integrations and credentials. In this guide, we refer to these contacts as Credential Managers - the designated technical users responsible for managing API credentials.

Quick summary

  • What credential managers can do?: Create, rotate, view, and delete client secrets for your applications.
  • What WMDA does vs & what members do: WMDA creates and manages the applications and assigns client IDs; members manage their own client secrets using the dedicated portal page.
  • Why secret rotation matters: Client secrets expire periodically. Rotating them on time ensures uninterrupted API access and maintains security.

1. Manage API Credentials

You can manage API credentials using the Manage API Credentials page, where you can view, create, and delete client secrets.

1.1 Access to the Manage API Credentials Page

API credentials consist of a client ID and a client secret. This portal allows you to manage the client secrets associated with each application. See 2. About API Credentials & 3. Applications on the Manage API Credentials Page below for more details.

  1. Visit the Manage API Credentials page https://portal.wmda.info/manage-api-credentials.
    1. You must login to the WMDA Portal using MFA (MFA user guide).
    2. You must have the credential manager role assigned by the WMDA team.

...