Information for: DEVELOPERS   PARTNERS

Profiles API and HMAC authorization

Based on Acquia Lift account configuration, API calls may require HMAC authentication as a header within the request. HMAC is a keyed-hash authentication code that calculates a message authentication code (MAC) involving a cryptographic hash function in combination with a secret cryptographic key.

This authentication scheme protects your data and ensures that your secret keys stay secure, and utilizes the Access Key ID and secret access key associated with your Acquia Lift subscription.

Acquia has HMAC implementation scripts in several languages, including the following:

Profiles API calls support authentication with both HMAC v2 and HMAC v1.

Note

Although HMAC v1 is still supported, Acquia recommends that you use HMAC v2 with your Profiles API calls.