API Credentials

To request Fourthline API credentials, contact your customer success manager.

Your Fourthline API credential set includes:

• client_id: Your unique identifier from Fourthline
• client_secret: Your unique password from Fourthline

Fourthline authenticates all API requests using the API credentials associated with your account.

You can receive multiple credential sets, depending on your operational and security requirements:

• Per environment: Separate credentials are issued for Sandbox and Production environments.
• Security rotation: You can can request new API credentials multiple times per year for security compliance.

Your customer success manager can assist with credential rotation and deletion as needed.

Sandbox and Production environments

Make all API requests to Fourthline in either the Sandbox or Production environment.

• Use the Sandbox to access test data.
• Use Production to access clients' real identity data and case outcomes.

Objects created in one environment are not accessible in the other. For example, a clientData object cannot be included in a case in production.

You must use separate API credentials for each environment.
You can receive production API credentials only once.
If you lose your Production credentials, you can’t retrieve them.
To regain access, you must rotate or delete them and request a new set.

Safety

To keep your credentials safe, we recommend following these best practices:

• Only grant access to staff who need it.
• Control access using a password manager or secret management service.
• do not store credentials in a version control system.
• do not embed credentials where they can be exposed to attackers, for example, in a mobile application.

Invalid credentials

If a request:

• Does not include valid credentials, Fourthline returns an Invalid request error.
• Includes deleted or expired credentials, Fourthline returns an Authentication error.

Support

For help with your API credentials, contact your Fourthline delivery manager.