Controlling access to merchant accounts.
To change the permissions of an API credential:
1. Log in to your Customer Area.
2. Go to Developers > API credentials, and select the credential username you want to manage permissions for, for example ws@Company.
[YourCompanyAccount].
3. Under Roles and Associated Accounts, select Roles.
4. Use the search bar to find roles or open the categories to see lists of available roles.
5. Select which roles to give to the API credential.
6. Under Accounts, select the accounts the credential can access.
7. Select Save changes.
Change your API key
To change your API key, follow the steps to generate an API key.
When you generate a new API key, it can be used immediately. The old key will still work for 24 hours, allowing you to update your systems with the new key.
Extend the time you can use the old API key
To extend the time you can use the old API key:
1. Log in to your Customer Area.
2. Go to Developers > API credentials, and select the credential username for your integration, for example ws@Company.
[YourCompanyAccount].
3. Under Server settings > Authentication select the API key tab.
4. Under Expiring keys, you can see how long you have left until the old key expires. Select the reset icon to reset the expiry to 24 hours. Select the
expire now icon to expire the old key immediately.
5. Select Save changes.
Generate a basic authentication password
If you are using basic authentication to authenticate your API requests, you can generate a basic authentication password:
1. Log in to your Customer Area, and go to Developers > API credentials.
This opens a list with all API credentials linked to your company account.
2. Select the credential username you want to generate the password for.
3. Under Server settings > Authentication, select the Basic auth tab.
4. Select Generate password.
5. Select the copy icon and store your basic authentication password securely in your system.
6. Select Save changes.
If you generate a new basic authentication password, the old password stops working immediately.
Unlike with the API key, there is no overlap period when you can use both the old and the new basic authentication password.
When you switch to your live environment, use the basic authentication credentials from your live Customer Area.
Instead of generating a new password, you can create a new API credential. This will let you use both your existing password and a new one until you have
updated your systems.
Add allowed IP range
As a security measure, you can add allowed IP addresses to your API credential.
When you add an allowed IP range, only requests originating from that range will be permitted.
To add allowed IP addresses:
1. Log in to your Customer Area.
2. Go to Developers > API credentials, and select the credential username for your integration, for example ws@Company.
[YourCompanyAccount].
3. Under Server settings, select Allowed IP range.
4. Add IP addresses that you want to allow access from.
5. Select Save changes.
Multiple API credentials
When choosing whether to create multiple API credentials, there are trade-offs to consider. Having fewer credentials minimizes the number of API keys you
need to handle, while having more gives you better control over API permissions, increasing security. For example:
If you have both an online sales channel and a point-of-sale sales channel, we strongly recommend creating a separate API credential for each
channel.
If you are doing unreferenced refunds for online payments, we strongly recommend creating a separate credential for processing these refunds.
If you have an ecommerce system and a shipping system, you can separate the permissions for initiating and capturing payments.
Some merchants also choose to create separate API credentials for different legal entities or different websites. These are just some considerations to
take into account, the number of API credentials is ultimately up to you.
Create an API credential
To be able to create API credentials, you must have one of the following user roles:
Merchant admin
Manage API credentials
To create a new API credential:
1. Log in to your Customer Area, and go to Developers > API credentials.
This opens a list with all API credentials linked to your company account.
2. Select Create new credential.
3. Under Credential type, select Web service user. You can add a description for the credential here.
4. Select Create credential.
5. To generate an API key select the API key tab under Server settings > Authentication. Select Generate API key, copy the API key using the copy
icon and store your API key securely in your system.