Profiles API and HMAC authorization

Based on Acquia Lift account configuration, API calls may require HMAC authentication as a header within the request. HMAC is a keyed-hash authentication code that calculates a message authentication code (MAC) involving a cryptographic hash function in combination with a secret cryptographic key.

This authentication scheme protects your data and ensures that your secret keys stay secure, and utilizes the Access Key ID and secret access key associated with your Acquia Lift subscription.

Acquia has HMAC implementation scripts in several languages, including the following:

Profiles API calls support authentication with both HMAC v2 and HMAC v1.


Although HMAC v1 is still supported, Acquia recommends that you use HMAC v2 with your Profiles API calls.

Contact supportStill need assistance? Contact Acquia Support

Acquia: Think Ahead

53 State Street, 10th Floor
Boston, MA 02109
United States
Phone: 888-922-7842

Map: Google Maps
View other locations