Effective:
- 27 February 2024 on Sandbox
- 20 March 2024 on Live
The creation of an Authorised User for a Buyer is a key moment in the integrity of the security for that Buyer. To mitigate against security risks, we are now requiring the user who is creating a new authorised user to step-up their token. Creating Authorised Users continues to be an operation that can be performed by a user that has the Admin role.
Affected API endpoints:
More details on how to step-up a token are available in our documentation.