Operations

Use the Self-Service Hub to manage API credentials, integrations, and workflow configurations, and to monitor your clients.

Integrations

Use Integrations to connect your systems to Fourthline. Authenticate requests with API credentials and receive updates through webhooks.

Hub Integrations

Prerequisites

• Developer user role to manage API credentials. Organization Admins can assign roles on the Users page.

• For Prospect account, an active trial is required to access this page.

  Trial API credentials allow you to retrieve results from test workflows using the available endpoints.

---

Generate API credentials

Generate API credentials to authenticate your application when making requests to the Fourthline API.

1. Go to the Integrations page and open the API credentials tab.
2. Select Generate API credentials.

The credentials are generated and activated immediately.

3. Copy and store your client secret securely.

Important

The client secret is shown only once. Copy it and store it securely. After you close the window, you cannot retrieve the client secret again.

4. Test your credentials by creating an access token - see Create access token.

The newly generated credentials appear at the top of the Active API credentials list, and include:

• The Client ID
• The Created timestamp
• The email address of the user who created the credentials

Security best practices

After you copy your credentials from the Hub, follow these best practices to keep them secure:

• Only grant access to staff who need it. Follow the principle of least privilege.
• Use a password manager or secrets management service. Tools like 1Password, HashiCorp Vault, or AWS Secrets Manager provide secure credential storage.
• Never store credentials in version control systems. Don't commit secrets to Git, even in private repositories.
• Do not embed credentials in client-side code. This includes mobile applications, JavaScript, or any code that could be exposed to attackers.

---

Revoke API credentials

You can revoke API credentials at any time.

Important

Once revoked, any system, application, or integration using these credentials will immediately lose access to the Fourthline API.

Before you decide to revoke API credentials, ensure you have another active set of credentials to prevent service interruption.

Fourthline allows multiple active credentials simultaneously to support safe credential rotation.

To revoke API credentials:

1. Select your environment:

• If you have a Business Partner account, use the environment selector in the top left to choose Sandbox or Production.
• Prospect accounts only have access to Sandbox and don't see this selector.

2. Go to the Integrations page and open the API credentials tab.

3. In the Active API credentials list, find the credentials you want to revoke and select Revoke.

4. In the confirmation dialog, confirm that you want to revoke the credentials for the selected environment.

5. Test the revocation by making an API request with the revoked credentials. The system will now return an Authentication error.

View revoked credentials

The revoked credentials appear at the top of the Revoked API credentials list with the following details:

• Client ID
• Created timestamp
• Revoked timestamp
• Email address of the user who revoked the credentials

This information is maintained for audit trail purposes.

---

View webhook configurations

Viewing webhook configurations is available only to users with a Business Partner account, and for V2 Integrations.

To configure webhooks, see Webhooks.

To view your webhook configurations:

1. In Hub, go to the Integrations page and open the Webhooks tab.

2. Under Active Webhooks, review your configured webhooks.

3. Review the Workflow column.

   • Default indicates that the webhook applies to all workflows unless a workflow-specific webhook has been configured.
   • A workflow-specific webhook overrides the default webhook for that workflow. In this case, the Workflow column displays the workflow name instead of Default.

4. Click the control for a webhook to view its full configuration.

To create a new webhook, select the appropriate environment (Sandbox or Production) and click Add Webhook.

---

Clients

The Clients tab shows client records in reverse chronological order (most recent first). Built-in filters let you quickly find clients by status, workflow, or other key attributes.

In Hub go to Clients and open the Clients tab.

Hub Clients tab

Overview

In the Clients tab, each row shows a snapshot of a client’s key details, including:

Filters

Use filters to narrow the list of clients as follows:

Select Reset all to clear all filters.

---

Verifications

Verifications are individual checks performed as part of a client’s onboarding workflow.

In Hub go to Clients and open the Verifications tab.

Hub Verifications tab

---

Overview

Each verification has one status at a time, and can include:

• Verification ID: Unique identifier (workflow ID or signature ID).
• Status: Color-coded for quick interpretation:

Tip

For red and yellow statuses, hover over the status to see a full description and the related status codes.

• Products: Products covered by the verification. Hover to see all enabled.
• Document: Issuing country and type of primary ID document (if any).
• Workflow name: Configured workflow or legacy process/branch.
• Last updated (CET/CEST): Timestamp of latest status change. Example: from pending → success.

Filters

Use filters to narrow the list as follows:

Select Reset all to clear filters.

Hub Documents filter

---

Verification details

You can view detailed insights, such as verification timelines, the user journey, and uploaded media files, by selecting a client from Clients or a verification from Verifications.

Hub Verification timeline

Available information for each verification includes:

---

Next steps

Learn how to use Hub Insights dashboards to your advantage.

Get in touch