API Access
SHIFT Web Services Security#
The web service is secured using transport-level security (SSL over HTTP) to ensure encrypted communication between the agent system and SHIFT.
-
Agent IP Authentication:
The agent must provide the public IP addresses of their client-service systems. The SHIFT security team will configure these IP addresses within the trusted zone to authenticate all incoming SOAP requests from the agent side. -
Agent Credentials Authentication:
Each API call (SOAP request) must include valid agent credentials. Every method within the SHIFT API requires the agent credentials as part of the input fields to verify and authenticate the request.
Agent Credentials fields#
Credentials will be assigned and provided by SHIFT
| Field | Type | Size | Mandatory |
|---|---|---|---|
| agentCode | String | 5 | Yes |
| userId | String | 20 | Yes |
| userPassword | String | 30 | Yes |
Security Recommendation
It is recommended to change the provided password upon first login. See Change User Password
SHIFT Web Services URL#
- Demo & Testing Environment:
https://apidemo.shifttransfer.com:1663/SHIFTApiV3/SHIFTApiV3Service?wsdl
- Production Environment:
The production endpoint will be provided by the SHIFT Support Team.