> ## Documentation Index
> Fetch the complete documentation index at: https://eurusys-6c0957fa.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# The Client Portal

> What you can do in the Validation Gateway Client Portal, and how to get the credentials the SDK needs.

The **Client Portal** is where your organization manages its Validation Gateway integration — API keys, devices, enabled methods, verification history, billing, and your team. Everything you see is scoped to **your organization**; this guide covers only the client-facing experience.

<Info>
  Your organization is set up on the Validation Gateway by ICP as part of onboarding. Once that's done, you sign in to the portal with your email and password (with a one-time passcode if 2FA is enabled), and everything below is self-service.
</Info>

## Who can do what

The portal has two client roles:

| Role              | Can do                                                                                                       |
| ----------------- | ------------------------------------------------------------------------------------------------------------ |
| **Org Root User** | Full control of your organization: create/revoke API keys, register and manage devices, manage team members. |
| **Org User**      | Read-only access: view keys, devices, methods, transactions, and analytics.                                  |

## What's in the portal

Your organization owns these resources, each on its own screen:

| Area               | Screen                          | What it's for                                                          |
| ------------------ | ------------------------------- | ---------------------------------------------------------------------- |
| **Overview**       | Summary                         | Verification analytics, method breakdown, KPIs.                        |
|                    | Transactions                    | History of every verification (journey), with status and date filters. |
| **Operations**     | [Methods](/dashboard/methods)   | The verification methods enabled for your organization.                |
|                    | [API Keys](/dashboard/api-keys) | Create and manage the credentials your SDK authenticates with.         |
|                    | [Devices](/dashboard/devices)   | Register and manage the devices running the SDK.                       |
| **Finance**        | Balance & Metering              | Wallet balance and per-method usage.                                   |
| **Access Control** | Users                           | Manage your team members.                                              |

## Getting to SDK credentials

The one path every developer needs:

```mermaid theme={null}
flowchart LR
    A["Sign in to<br/>Client Portal"] --> B["Operations → API Keys"]
    B --> C["Create key →<br/>copy key ID + secret"]
    C --> D["Embed key ID in SDK<br/>secret in your backend"]
    D --> E["Register device<br/>& validate"]
```

<Steps>
  <Step title="Sign in">
    Open the Client Portal and sign in. You'll land on your organization's **Summary**.
  </Step>

  <Step title="Create an API key">
    Go to **Operations → API Keys**, create a key, and capture the **key ID** and **key secret**. The secret is shown **once**. See [API keys](/dashboard/api-keys).
  </Step>

  <Step title="Scope it to methods">
    Pick which of your organization's enabled [methods](/dashboard/methods) the key may call.
  </Step>

  <Step title="Wire it into your integration">
    Embed the **key ID** in the SDK and keep the **secret** in your backend's secret manager — the SDK never receives it directly. See [Authentication](/concepts/authentication).
  </Step>
</Steps>

## What you need before writing code

<CardGroup cols={2}>
  <Card title="Base URL" icon="link">
    The Validation Gateway API base URL for your environment.
  </Card>

  <Card title="API key ID" icon="key">
    The non-secret identifier embedded in the SDK config.
  </Card>

  <Card title="API key secret" icon="lock">
    Stored in your backend's secret manager; used only to sign JWTs.
  </Card>

  <Card title="Enabled methods" icon="list-check">
    The verification methods available to your organization.
  </Card>
</CardGroup>