Add an Issuance API

You can add an Issuance API to manage printers and submit print jobs. Instant ID as a Service provides a JSON file that containing the Account URL, Application ID, and Application Shared Secret that Instant ID as a Service uses as credentials to authenticate the API integration for Tenants, Administrators, and other account types.

Note: An Issuance API will allow Tenants to access basic print APIs. Tenants with Essentials and Advanced entitlements can access enrollment-based APIs. Create a Credential Design, Enrollment Design, and Field Connections to use enrollment-based APIs.

See the Entrust Instant ID as a Service Issuance API Administration Guide for more information.

Add Administration API to Instant ID as a Service

1. Click Main Menu > Administration > Resources > Applications. The Applications page appears.
2. Click Add. The Add Applications page appears.
3. Click Issuance API. The Add Issuance API page appears.
4. In the Application Name field, type a name for your application.
5. In the Application Description field, type a description for your application.
6. (Optional) Add a custom application logo as follows:
   1. Click Add next to Application Logo. The Upload Logo dialog box appears.
   2. Click Upload to select an image file to upload.
   3. Browse to select your file and click Open. The Upload Logo dialog box reappears showing your selected image.
   4. If required, re-size your image.
   5. Click OK.
7. Click Next. The General Settings page appears.
8. The Application ID is generated automatically once you submit the application. You do not need to enter a value for this field.
9. From the Select Role drop-down list, select to the role you want to assign to the API application. The role defines the operations that can be performed using this API application. You can select one of the system-defined roles or a custom role. You cannot select No Role Assigned.

   System-defined roles include:

   • Auditor: This role grants view-only access to users, authenticators, roles, and tokens on the integrated Entrust Adaptive Issuance Instant ID as a Service account.
   • Help Desk Administrators: This role can add or remove users and their authenticators.
   • SIEM Add-on: This role provides full access to all SIEM management functions in view-only mode.
   • Super Administrator: This role can add or remove users and their authenticators, and query your Entrust Adaptive Issuance Instant ID as a Service account roles.
   • Issuance Administrator: This role manages printers, print jobs, and Issuance administration. Selecting this role creates an Issuance API application that can manage printers and performs print operations
   • Issuance Operator: This role can perform print operations. Selecting this role creates an Issuance API application that can issue print jobs.
10. If the account is a Service Provider, from the Select Service Provider Role drop-down list, select the Service Provider role you want to assign to the API application. The role defines the operations that can be performed using this API application.

    Available roles:

    • Super Account Manager: Users with this role have full access to the Service Provider portal. These users can perform all the tasks assigned to Onboarding Administrators as well as:
      • Make changes to Service Provider settings.
      • Manage the Service Provider roles assigned to other users.
      • Remove Tenant accounts (this applies to regular Tenants only. Service Provider Tenants cannot be removed)
      • Unlock the administrators of a Tenant.
    • Audit: Users with this role have view-only access to the Service Provider portal. Auditors cannot make any changes to Service Provider settings.
    • Onboarding Administrator: Users with this role can view, create, lock, and unlock Tenant accounts as well as promote Tenants to Service Providers.
11. Click Submit. The Complete page appears. This page contains the Account URL, Application ID, and Application Shared Secret that serve as your Issuance API's credentials.
12. Do one of the following:
    • Click Copy to Clipboard to copy the applicationId, hostname and sharedSecret. These values are required to authenticate the API integration.
    • Click Credentials to download a JSON file that contains the API credentials for this application.
13. Click Done.