The integration process enables external applications to securely connect with the InterAction+™ Cloud API by following the steps outlined below.
Initial Information Collection
The integration process begins with gathering relevant information from the partners/customers who wishes to build an integration with the InterAction+™ Cloud API for a tenant. This includes understanding the partner’s/customer's integration goals, the scope of data access required, and collecting any specific details necessary for the integration.
Third-Party Client Registration
Once the required information is collected, an InterAction+™ Operations team member will register the Third-Party Client in our system. During the registration, a unique Client ID and Client Secret are generated for the Third-Party Client. These credentials are essential for authenticating the Third-Party Client and ensuring secure communication with our system.
Provisioning Integration Credentials
Once the registration is complete, the InterAction+™ Operations team provides the partner/customer with the following information required to build their integration:
- Third-Party Client ID
- Third-Party Client Secret
- InterAction+™ Tenant Authority URL
- InterAction+™ Cloud API URL
- Secure Storage of Credentials: To securely store user credentials it is essential to use industry-standard cryptographic methods like hashing and salting. This helps protect against unauthorized access in the event of a data breach. In the InterAction+ Cloud registration database, the user's account name is stored as a hashed value.
Partner/Customer Integration Development
The next step involves the partner/customer developing the integration using the provided credentials and URLs. Additionally, the partner/customer will create a setup process that allows the InterAction+™ Tenant Admin to initiate the setup, grant consent for data access, and designate a user for API transactions.
InterAction+™ Tenant Admin Initiates Setup
An InterAction+™ Tenant Admin will initiate the setup process and perform the following actions:
- Grant consent for the Third-Party Client to access InterAction+™ tenant data.
- Designate a user responsible for API transactions.
This step will generate a token, allowing the Third-Party Client to securely interact with the InterAction+™ Cloud API and access the tenant's data.