API access

To begin integrating with Identomat, you’ll need API keys to authenticate requests

Obtaining API keys

• Navigate to the API keys section: Log into your Identomat dashboard and select API keys from the menu, nested under Settings .

• Generate key: In the API section, click the Generate key button.

• Whitelist IPs (optional): You can restrict a key to a set of specific IP addresses, so that only requests from those IPs are accepted — requests from any other IP will be rejected. If no IPs are added, the key will accept requests from any IP. Whitelisted IPs aren't locked in at generation — you can add or remove them at any time from the key's settings.

• ❗ Store securely: Copy the generated API key and securely store it. For security purposes, the key will only be displayed once. If lost, you’ll need to generate a new one.

💡 HMAC authorization: For enhanced security, you can implement HMAC authorization using your secret key as the encryption key. This is optional but recommended for production environments.

Procedure

The integration procedure consists of the following steps:

1. Acquiring a session_token.

2. Redirecting the user's browser to widget.identomat.com.

3. Checking for a result.

To acquire a session_token, the company server needs to call the /begin endpoint and provide the following arguments: company_key, flags and steps. The steps array contains the configuration for individual steps in the identification process, each of which can have its own set of flags specific to that step.

The endpoint used to create a session_token:

https://widget.identomat.com/begin/

For more details, see:

Developer guide

Step-by-step instructions and best practices for integrating and customizing our identity verification solutions.

API Reference

Comprehensive details on endpoints, parameters, and response formats for seamless API integration.