# Authentication

<figure><img src="https://855896703-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F4UWkWFnnmVPzvJTdMtC0%2Fuploads%2FVUFeyWH7Qng4W63sB6hf%2FAuthenticate%203a.png?alt=media&#x26;token=70ecc8b1-d939-4bc3-816b-8935820300fe" alt=""><figcaption></figcaption></figure>

## Basics

To authenticate to our services, depending on your integration of choice, you might need the following:

{% stepper %}
{% step %}

#### An account code and token

Using your unique key representing the Number account and the token generated from the Client Admin Portal, you'll be able to authenticate to the REST API.&#x20;
{% endstep %}

{% step %}

#### API key

When initializing either of the mobile SDKs, you'll need an API key provided by Number.&#x20;
{% endstep %}

{% step %}

#### HMAC secret

If you are PCI Compliant and want to use our REST API to collect cardholder data, some endpoints will require you to append additional data to the session header. You'll be able to generate this header using an HMAC secret provided by us.
{% endstep %}

{% step %}

#### Username and password

When logging into the Virtual Terminal you'll need a username and password. When logging into the Client Admin Portal this will also require two-factor authentication using a text message to your mobile phone.
{% endstep %}
{% endstepper %}

***

## REST API

Here's a basic step-by-step guide on how to authenticate with our APIs:

{% stepper %}
{% step %}

#### Find your account code

This will be provided by Number when you create an account with us.
{% endstep %}

{% step %}

#### Create a new token

Use the Client Admin Portal to create a token. If you don't have access to the Client Admin Portal, contact the [Number support team](https://number-development-portal.gitbook.io/number-development-portal/kmuHipzA8ZCcM2LLePFe/help/customer-support).
{% endstep %}

{% step %}

#### Send a request to authenticate and store the session key

You'll need to provide your account code as `AcctCode` and token as `Token`.

REST API: [#apicardprocrest-v1.0.0-authenticate](https://docs.number.tech/api-reference/rest-api-alt/authentication#apicardprocrest-v1.0.0-authenticate "mention")

Handle the response and store the `SessKey` value.
{% endstep %}

{% step %}

#### Include the session key in your requests

**If you don't encounter a PCI Level 1 compliance warning in API reference page:**

For REST API, include a `SessKey` header with the stored value.

**In case you encounter the compliance warning in API reference page, as seen below:**

You'll need to prepare a secured header and use its value in place of the original `SessKey`.&#x20;

If the HMAC secret was not provided to you previously or you don't know how to find the value of `UserID` or `DeviceID`, [contact Number](https://docs.number.tech/help/customer-support).&#x20;

The format for the key is as follows: [`SessKey`](#user-content-fn-1)[^1]\_[`Epoch`](#user-content-fn-2)[^2]\_[`DeviceID`](#user-content-fn-3)[^3]\_[`Hash`](#user-content-fn-4)[^4]. Include this key in the same way as you would include the `SessKey` (see case above).
{% endstep %}
{% endstepper %}

{% hint style="info" %}
If you want to read more about authentication, see the [authentication](https://docs.number.tech/documentation/getting-started/basics/authentication "mention") guide&#x20;
{% endhint %}

***

## Android and iOS SDK

Authenticating with the mobile SDKs is very simple. [Contact Number](https://docs.number.tech/help/customer-support) to get an API key, HMAC secret, and an optional Sentry DSN.&#x20;

After installing the SDK of your choice, you can configure and initialize the `EasyPay` class.

#### Android

#### iOS

***

## Virtual Terminal

To log in and use the features of Virtual Terminal, you'll first need to create accounts for your users through the Client Admin Portal.&#x20;

To access the portal, [Contact Number](https://docs.number.tech/help/customer-support). You will be asked to provide the full name, e-mail address, and cell phone number for every individual you wish to have access to the portal. Those individuals will then be able to enter the portal and create new Virtual Terminal users through the portal by entering *Manage Accounts* > *Users* through the navigation on the left.

Now, those users will be able to access the Virtual Terminal using the link below.

[^1]: This key is generated upon successful authentication.

[^2]: Seconds since 1970 UTC

[^3]: UserID or DeviceID

[^4]: The HMAC hash created using the secret value which we will provide.