Skip to main content

Management API Changelog v1.4.0

Release summary

This release adds e-invoicing scenarios for France and the United Kingdom. It also introduces OAuth2 authentication as the recommended authentication method for Management API integrations.

🌍 New country scenarios

Partners can now activate two additional country scenarios through the Management API:

  • 🇫🇷 France

  • 🇬🇧 United Kingdom

These scenarios provide the country-specific configuration required for customer onboarding and reduce manual setup.

Endpoint

POST /api/v1/management/companies/{companyUuid}/scenarios

🇫🇷 France example

{ 
"name": "FRANCE_EINVOICE", 
"peppolParticipantIds": ["9957:FRxxxxxxxxx"], 
"emailAddressesForValidationErrors": ["user@company.com"], 
"siret": "xxxxxxxxxxxxxx", 
"siren": "xxxxxxxxx", 
"paAuthorisationContract": true, 
"direction": "BOTH", 
"selfBilling": false 
}

🇬🇧 United Kingdom example

{ 
"name": "UNITED_KINGDOM_EINVOICE", 
"peppolParticipantIds": ["9932:GBXXXXXXXXX"], 
"emailAddressesForValidationErrors": ["user@company.com"], 
"direction": "BOTH" 
}

🔐 OAuth2 authentication

The Management API now supports the OAuth2 client credentials flow. OAuth2 is the recommended authentication method for new integrations.

The required credentials are:

  • Client ID

  • Client Secret

  • App key, which remains unchanged and is still required with OAuth2

Authentication options in Monitor

Monitor now provides both authentication methods for Management API connectors:

  • Basic Authentication, which still requires IP whitelisting

  • OAuth2 client credentials, which does not require IP whitelisting

The OAuth2 credentials are available below the connector information in Monitor. Select the option to generate your new Client ID and Client Secret. Copy the Client Secret when it is generated and store it in an approved credential manager, as it is hidden afterwards.


⚠️Migration period

Both authentication methods are currently available. Basic Authentication is marked for deprecation, but no removal date has been announced. Existing integrations can continue to use Basic Authentication during the migration period. OAuth2 is recommended because it removes the need for IP whitelisting.


✅ Recommended action

  • Use OAuth2 for new integrations

  • Plan the migration of existing integrations from Basic Authentication to OAuth2

  • Keep the existing app key in every request

🔭 Next up

We are preparing additional country features for:

  • 🇸🇰 Slovakia

  • 🇭🇷 Croatia

  • 🇦🇪 United Arab Emirates (UAE)

  • 🇩🇪 Germany e-mail scenario

The ecosio Product team

ConnectConnect Public Documentation