URM Username and Password

Authentication and authorization

When calling APIs, participants authenticate their identity using Basic Authentication — passing their URM username and password.

The username and password are provided by your company’s participant administrator (PA) and is encoded into a Base64 authorization token. To do this you need an application such as Postman.

User Rights Access

For access to APIs, participant administrators select the relevant entity in the MSATS “Maintain Rights” menu and assign the right to their participant users.

For example, the entity required for the Generator Recall APIs is:

• EMMS - Offers and Submissions - Generator Recall

Example

The HTTP Basic authentication header takes the following format: Authorization: Basic {Base64 hash of user:password}, for example: