> ## Documentation Index
> Fetch the complete documentation index at: https://docs.alignet.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication and security

> Generate and securely store OAuth credentials for entities registered through the Onboarding API.

When registering an entity, the Onboarding API can generate OAuth credentials consisting of a `client_id` and `client_secret`.

## Generation by entity

| Entity              | Behavior                                                                   |
| ------------------- | -------------------------------------------------------------------------- |
| Gateway             | Credentials are always generated and required.                             |
| Acquirer            | Generation is controlled with `generate_credentials: "true"` or `"false"`. |
| Payment Facilitator | Generation is controlled with `generate_credentials: "true"` or `"false"`. |
| Merchant            | Generation is controlled with `generate_credentials: "true"` or `"false"`. |

<Warning>
  The `client_id` and `client_secret` are displayed only once during registration. Store them securely.
</Warning>

## Use in the registration flow

```mermaid theme={"system"}
flowchart LR
    A["Alignet Admin"] -->|"Registers"| G["Gateway"]
    G -->|"Receives credentials"| C["client_id + client_secret"]
    C -->|"Authenticates registration"| E["Acquirers"]
    G --> PF["Payment Facilitators"]
    G --> M["Merchants"]
```

The Gateway uses its credentials to register its Acquirers. The Gateway or Acquirer can register Payment Facilitators, and the Gateway, Acquirer, or Payment Facilitator can register Merchants.

<Card title="Back to Onboarding" icon="arrow-left" href="/en/onboarding">
  Review the hierarchy, domains, and complete registration flow.
</Card>