PingAuthorize

Rotating shared secrets

To avoid service interruptions, the Sideband API allows multiple, distinct shared secrets to be accepted at the same time.

About this task

You can configure a new shared secret that the Sideband API accepts alongside an existing shared secret. This allows time to update the API gateway plugin to use the new shared secret.

Steps

  1. Create a new Sideband API Shared Secret and assign it to the Sideband API HTTP Servlet Extension. For more information, see Creating a shared secret.

  2. Update the API gateway plugin to use the new shared secret.

  3. Remove the previous Sideband API Shared Secret. For more information, see Deleting a shared secret.