To satisfy security needs, Site Factory administrators can use the Site Factory Management Console or the Site Factory API to reset API keys of an individual user, or all users. Users can also reset their own API key.
You can reset your own API key, regardless of your assigned roles in Site Factory, by completing the following steps:
Until an administrator for your Factory performs the steps described in Copy production data to non-production environments, selecting the Stage all users option to copy user data to non-production environments, your previous API key will remain in effect on non-production environments.
Administrators can reset a single user’s API key by using the Site Factory Management Console or the /api/v1/users/[user_id]/api-keys endpoint. To reset a single user’s API key from the Site Factory Management Console, complete the following steps:
After the user staging process is complete, the user’s API key is updated on all environments.
You can reset the API keys for all users by using the Site Factory Management Console or the /api/v1/users/all/api-keys endpoint. To reset the API keys of all users from the Site Factory Management Console, complete the following steps:
Sign in to your Prod environment’s Site Factory Management Console using an account with the platform admin role.
In the admin menu, click Administration, and then click the Security settings link.
Scroll to API keys and click Regenerate keys.
Site Factory will create tasks to regenerate the keys for all users. For information about monitoring these tasks, see Task logs in Site Factory.
To update all API keys on your non-production environments, perform the steps described in Copy production data to non-production environments after the API key regeneration tasks complete, selecting the Stage all users option to copy only user data to the non-production environment.
After the user staging process is complete, all API keys are updated on all environments.