Ways of sharing the keys and secret

[Vishal_Holla]

Hi,

What way can be followed to share the API key and Secret safely to business users? can you suggest some ways?
Or whether apigee is providing any of those facilities where keys and secret be shared safely over encrypted channel?

Regards,
Vishal Holla

[pusulurikiran]

We usually share the key and secrete in email with encrypt option available in outlook email, with permission,

[dchiesa1]

I think there is a  better way!  Specifically, via a developer portal, that uses only HTTPS!

[Vishal_Holla]

This option is not available in our outlook 😞

Any other way?

[dchiesa1]

What way can be followed to share the API key and Secret safely to business users? can you suggest some ways
Or whether apigee is providing any of those facilities where keys and secret be shared safely over encrypted channel?

Yes, use an Apigee developer portal. If it runs only on HTTPS, and if it uses SAML authentication, then

• You can trust the developer is authenticated by the IDentity provider (IDP) of your choice. Eg, Okta, Active Directory, Ping, etc.
• developers can see the keys and secrets you have provisioned for them. And also, the expiry if any on those keys.
• Developers can request new keys and secrets as appropriate
• Teams of developers can share the same sets of credentials.

Learn more about developer portals at this link.

[Vishal_Holla]

Our developer portal has access to External users too. What can be done in that case?

[dchiesa1 · Accepted solution]

Our developer portal has access to External users too. What can be done in that case?

You may publish developer portals to users on your corporate network, or to the internet. Either is possible. Or you can provision multiple developer portals for those different audiences, with different authentication for each of them. And different visibility of the API products published to those portals.

There is lots of information on these options in the documentation link I shared.