API Key Management
Introduction
In order to access to Dassault Systèmes Partner APIs, you will need an API key to authenticate the requests. Each Partner Legal Entity will be associated to an API key. This choice derives from following considerations :
1. Technical
Managment of a single API Key for all the Legal Entities of a global partner (having Legal Entities in several Countrie, Geos) would anyway require additional arguments in APIs to convey information about the concerned Legal Entity.
2. Cybersecurity
In the event of Cybersecurity issues (e.g. API key leak), the issue would be limited to the Concerned Legal Entity and other Legal Entities Business operations would be unaffected.
Request Process (LightHouse for APIForPartners program)
During the light House phase of the program, the requests process will be done within a dedicated 3DSwym community / discussion with Dassault Systèmes Information System team.
After Request is formalized to Dassault Systèmes, the process is as follows :
- Dassault Systèmes Information System will initialize one API key for the partner
- Dassault Systèmes Information System will communicate the API key to Partner Admin within Dassault Systèmeswym Direct Discussion with Partner Admin
- Partner Admin will use the initial API key and the dedicated API endpoint to generate a new API key (that will not be known by Dassault Systèmes IS).
- Partner Admin will communicate back to Dassault Systèmes Information System the hashed_key value returned by the API.
- Dassault Systèmes Information System will update API Gateway configuration accordingly so that Partner can use the newly generated API Key.
How to revoke your API key ?
In the event of the need to revoke the API key, follow steps 3 to 5 in the above process.