Account System Product
We've released Account System Product, a capability that lets your organization's central account or platform product create authentication challenges and sessions on behalf of other products in your organization using a single API key and an optional header.
What's New
Account System Product
When a product is enabled as an Account System Product in Compliance Studio, you can call certain k-ID APIs on behalf of other (non–account system) products in the same organization by sending the Kid-Target-Product-Id header with the target product's ID. You use your Account System Product's API key; no need to manage or rotate keys per target product.
Supported endpoints:
Parents see only the target product's configuration (notices, permissions, branding). Both the account system product and the target product receive webhooks for each event, with onBehalfOfProductId and initiatedByProductId so you can attribute cross-product flows.
Account System Product works with multi-product approval: you can set the Account System Product as an essential product of a target so the parent approves both in one flow.
Documentation
- Account System Product – implementation guide, configuration steps, webhook payloads, and security