​

Access Control

These API endpoints allow tenants to manage access control, authentication, and authorization in the FinCore™ platform, supporting secure access to financial services for both individual (B2C) and business (B2B) customers.

​

Use Cases

• Managing customer authentication
• Handling access control permissions
• Supporting multi-factor authentication
• Managing API credentials and tokens
• Implementing role-based access control

​

Integration Notes

Access control is a foundational security capability in the FinCore™ platform, ensuring that only authorized users can access sensitive financial data and operations. The access control system supports:

• Multiple authentication methods
• Two-factor authentication (2FA)
• Secret questions and answers
• Role-based access control (RBAC)
• API key and token management
• Session management and timeout controls

For Enterprise subscription tier tenants, additional access control features are available to support complex organizational hierarchies and granular permission models.

​

Key Endpoints

​

Authentication

Terminates a user session.

​

Access Control

GET /v2/access-control

Retrieves access control settings for a user or organization.

​

Credentials Management

GET /v2/credentials

Retrieves API credentials for a user or organization.

​

Related Flows

• Authentication Flow
• Two-Factor Authentication Flow
• API Credentials Management Flow

​

API Reference

For interactive API documentation, see the following endpoints:

• Login
• Logout
• Credentials Management
• Secret Questions