...
Authentication is performed with the combination of accountId and password fields. HoweverHowever, mutual SSL authentication can be used if preferred. To To use mutual SSL authentication, please contact us. When When using mutual SSL authentication, the customer must provide a client certificate as part of the handshake process. The The client certificate can be signed by our private certificate authority, or an external CA. If If an external CA is used, Edentiti Vix Verify needs to know which CA so that the CA certificate can be imported into the greenID truststore.
When mutual authentication is being used, a different endpoint must be used. Details Details are in the Web Service Endpoints section.
...
If you choose to use Mutual Authentication then you you provide Vix Verify a Certificate Signing Request (CSR) which Vix Verify will sign with its private CA.
As part of your User Acceptance Testing, it's important you allow time to test that you can connect over Mutual Authentication in the greenID production environment. Your greenID system will be migrated to production approximately 2 weeks after final sign-off of your greenID configuration, so this timeframe plus a testing period should be factored into any project planning.
Note that the WSDL's WSDLs for the MSSL web services also list a password argument to all the calls, however this is is ignored when the MSSL endpoints are used and is present only maintain a consistent interface for all our web service endpoints.
...
We use the following process to configure mutual authentication for test and then for production.
There are two options that you can choose from depending upon your needs and current setup. Our preferred option is for us to generate and sign a certificate using the Edentiti Vix Verify private certificate authority.
If you wish to use a client certificate signed by the Edentiti Vix Verify private certificate authority:
- Send us a certificate signing request (CSR) for your application infrastructure.
- We will generate a certificate using the CSR, pass that certificate to you and then we add that certificate to our trusted list of certificates for your test or production account.
- You need to add that certificate to your application server as a client certificate.
- To test the trust has been setup, retrieve the appropriate MSSL WSDL from the server that has the certificate installed on it.
...
To use password authentication you will need to provide a password with every web service call you make. The password will be provided to you with your accountId.
...