Profiles API and HMAC authorization

Based on Personalization account configuration, API calls may require HMAC authentication as a header within the request. HMAC is a keyed-hash authentication code that calculates a message authentication code (MAC) involving a cryptographic hash function in combination with a secret cryptographic key.

This authentication scheme protects your data and ensures that your secret keys stay secure, and utilizes the Access Key ID and secret access key associated with your Personalization subscription.

Acquia has HMAC implementation scripts in several languages, including the following:

Profiles API calls support authentication with both HMAC v2 and HMAC v1.


Although HMAC v1 is still supported, Acquia recommends that you use HMAC v2 with your Profiles API calls.