Credentials for the TruValidate Multifactor Authentication API are based on items in the Admin Center. API credentials are based on an entity (Organization, Directory, or Service) using the entity’s ID and a valid Public Key. These items are provided in the Authorization credentials. More information on providing credentials can be found in Authorization and Validation.

Key Rotation

Rotation of Public Keys is part of the core security functionality within the TruValidate Multifactor Authentication API. The Admin Center provides the functionality for migrating one or more Public Keys to another Public Key within a set of Public Keys. Public Keys may have expiration dates and may be set inactive. This allows you to determine the rotation strategy you prefer.

Multiple Keys

If your security model requires the use of separate credentials for different security zones or different hardware, the TruValidate Multifactor Authentication (MFA) API supports this functionality. MFA API allows for multiple active Public Keys for the same entity.

Entity Hierarchy

The TruValidate Multifactor Authentication API provides a hierarchical structure to reduce the number of keys an application needs to manage by providing the credentials for one the the entity’s ancestors when providing credentials. The details of providing the credentials can be found in Authorization and Validation.

A scenario for using credential hierarchy is when an application suite with multiple applications requires segmented authorization. You can create a separate Service for each application under a common Directory and use the credentials from the Directory to perform authorizations.

User Contributed

TransUnion links to user contributed code as a resource to its community. TransUnion does not in any way guarantee or warrant the quality and security of these code bases. User contributed code is supported by the creators. If you do find a link from the site to user contributed code that is malicious or inappropriate in any way, please report that link to TransUnion immediately and we will investigate the claim. Submit any issue to TransUnion support at ×