Authentication

To interact with our Soldo Business API, you'll need to complete either standard or advanced authentication.

For authentication, we use OAuth 2.0 with “Client Credentials Grant”.

      Client                                     Soldo Business API
 +---------------+                               +---------------+
 |               |---- Client Authentication --->| Authorization |
 |               |                               |     Server    |
 |               |<--------- Access Token -------|               |
 |               |                               +---------------+
 |  Application  |
 |               |                               +---------------+
 |               |---------- Access Token ------>|    Resource   |
 |               |                               |     Server    |
 |               |<------- Protected Resource ---|               |
 +---------------+                               +---------------+

All API requests must be made over HTTPS. Requests made over plain HTTP or made without authentication will fail.

There are two levels of authentication, depending on the purpose of your application:

1. Standard authentication, for accessing information for general business operations. All endpoints require standard authentication.
2. Advanced authentication, which provides additional security for transferring money, accessing transactions and making changes to the account. The list of endpoints requiring advanced authentication can be found on the Fingerprint order page.

All requests are authenticated using the API credentials you generate in the Soldo web app.

📘

Code samples

Snippets of code showing examples of standard and advanced authentication implementation are available in some of the most popular programming languages, see: Code samples