{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-guides/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"Veracode Application Security Integration Guide","siteUrl":"https://docs.synqly.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"creating-and-managing-api-credentials-in-veracode","__idx":0},"children":["Creating and Managing API Credentials in Veracode"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"1-introduction","__idx":1},"children":["1. Introduction"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["An API ID and Secret Key (HMAC credentials) are required in order to make signed requests to Veracode's REST APIs. This guide walks you through creating a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Veracode"]}," Application Security integration."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"2-prerequisites","__idx":2},"children":["2. Prerequisites"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Before you begin, ensure you have:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Access to the Veracode Platform"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Administrator privileges"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"3-configure-new-api-credentials-for-integration","__idx":3},"children":["3. Configure New API Credentials for Integration"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"1-create-an-api-user","__idx":4},"children":["1. Create an API User"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Log in to Veracode as an Administrator."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Click the Settings gear in the top right corner and click on ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Admin"]},"."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["On the Users tab, click on the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add New User"]}," on the right."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Provide the required user fields with the following scope permissions:"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"roles-required","__idx":5},"children":["Roles Required:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Role"},"children":["Role"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Purpose"},"children":["Purpose"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Creator or Security Lead"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Required to access the applications data."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Results API"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Required to access the findings data."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Reviewer or Security Lead"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Required to access the findings data."]}]}]}]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Save the new user and an email will be sent to the entered email."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Log out of the administrator account, then log in using the newly created API User account."]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"2-generate-api-credentials","__idx":6},"children":["2. Generate API Credentials"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Find the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Welcome to Veracode"]}," email and click on the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Activate Account"]}," button."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Set up a new password and MFA devices."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Once you have completed the setup proccess, you will be taken to the API Credentials view."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click on the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create API Credentials"]}," button."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["You will be provided with two options: ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["HMAC Credentials"]}," and OAuth Client. Go ahead and pick ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["HMAC Credentials"]}," and click on ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Generate"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Two values will now be shown:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["ID"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Secret Key"]}]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Copy and store these values in a secure vault for later user.",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Note: that these values will only be shown once."]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Veracode credentials expire after a fixed period (rotation is required); record the expiration date so you can rotate before it lapses."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"3-configure-the-integration","__idx":7},"children":["3. Configure the Integration"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Create your integration by supplying all configuration values."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Integration Parameter"},"children":["Integration Parameter"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Client ID"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["The ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["ID"]}," from Step 1."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Client Secret"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["The ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Secret Key"]}," from Step 1."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Veracode URL"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["https://api.veracode.com"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"4-important-links-in-veracode-documentation","__idx":8},"children":["4. Important Links in Veracode Documentation"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://docs.veracode.com/r/HMAC_credentials"},"children":["HMAC Credentials"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://docs.veracode.com/r/c_role_permissions"},"children":["Veracode Roles"]}]}]}]},"headings":[{"value":"Creating and Managing API Credentials in Veracode","id":"creating-and-managing-api-credentials-in-veracode","depth":1},{"value":"1. Introduction","id":"1-introduction","depth":2},{"value":"2. Prerequisites","id":"2-prerequisites","depth":2},{"value":"3. Configure New API Credentials for Integration","id":"3-configure-new-api-credentials-for-integration","depth":2},{"value":"1. Create an API User","id":"1-create-an-api-user","depth":3},{"value":"Roles Required:","id":"roles-required","depth":4},{"value":"2. Generate API Credentials","id":"2-generate-api-credentials","depth":3},{"value":"3. Configure the Integration","id":"3-configure-the-integration","depth":3},{"value":"4. Important Links in Veracode Documentation","id":"4-important-links-in-veracode-documentation","depth":3}],"frontmatter":{"slug":"guides/provider-configuration/veracode-appsec-setup","seo":{"title":"Veracode Application Security Integration Guide"}},"lastModified":"2026-05-18T15:10:18.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/guides/provider-configuration/veracode-appsec-setup","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}