- Purpose
- Pass enterprise security review the first time.
- Prerequisites
- Threat model of the data exchanged
- Architecture
- Trust boundaries: browser ↔ portal backend ↔ Integration Lab. Credentials only exist in the middle tier.
Configuration
| Transport | TLS 1.2+ everywhere |
Implementation steps
- 01Least-privilege scopes per client.
- 02Server-side secret storage with rotation.
- 03Signature verification on all inbound events.
- 04Short-lived, single-use launch tokens.
- 05Structured audit logging without PII in URLs.
- 06Documented data retention for proctoring evidence.
Testing procedure
- Attempt each call with a lower-privileged token and assert 403
Troubleshooting
Security review blocks go-live
Usually credential handling or evidence retention; both are answerable with this section.