Authenticate as partner

Use this page if you are building an integration as a partner and need to act on behalf of multiple customer accounts.

1. Get your partner credentials

If you are an integration partner, reach out to Marmin to create a partner account for you. As part of onboarding, Marmin will share a dedicated client_id and client_secret for your partner integration.

These client_id and client_secret values are used to perform all the necessary actions on your partner account, including:

• Provisioning accounts for your customers.

• Obtaining access tokens for your customers' accounts so you can perform operations on their behalf.

Keep these credentials secure and never expose them in client-side code or log files.

2. Obtain a partner JWT access token

Once you receive your client_id and client_secret, follow the Authentication overview section to exchange them for a JWT access token for your partner integration. The Authentication flow will:

• Validate your partner credentials.

• Issue a short-lived JWT that represents your partner integration.

You will pass this JWT in the Authorization header (as Bearer <partner_jwt_token>) when calling partner endpoints such as:

• Authenticate as partner (this page)

• Request Account Onboard OTP

• Verify Account Onboard OTP

• Obtain Account Access Token

3. Use the token for partner operations

After you have a valid partner JWT:

• Use it to provision customer accounts (for example, by requesting and verifying onboarding OTPs for your customers' account emails).

• Use it to obtain access tokens scoped to a specific customer account so you can perform API operations on behalf of that customer.

If the JWT expires or is rejected with 401 Unauthorized, repeat the Authentication flow with your client_id and client_secret to get a new partner JWT.