Testing certificates

Log in to the Tax Administration’s certificate service (Testing certificates)

Identify yourself using your online banking codes, a mobile certificate or a certificate card. You do not need a Suomi.fi authorisation.

• Enter your email address and telephone number when you log in for the first time.
• You can continue to the service after you have confirmed your email address in the message that is sent to you.

Once you have logged in, you can check a list of all testing APIs to which you have access rights. You can also view the certificates that are connected to these APIs.

Check that the information is up to date. Make sure your organisation has access to the APIs you need. Check and update the organisation's contact person and technical contact persons for certificates.

• If you carry out testing for several different organisations, you can view all organisations in the same list.
• Check the group management, which you can use to distribute access rights to new testers.

If the organisation is already using the desired API, proceed directly to step 3. Request a testing certificate.

If the organisation is not using any APIs at this stage, select ‘Submit API application’.

• Select whether you want to test APIs of the Tax Administration or the Incomes Register.
• • Enter the testing organisation’s information.
    • If you want to test the Incomes Register’s APIs, also enter the artificial identifier (usually the business ID) you have received from the Incomes Register for testing.
  • Select the APIs the organisation needs.
    • If you are requesting access rights to an Incomes Register API, also indicate why you want to use the API – whether you want to report income you have paid or whether you want to report data on behalf of someone else.
    • If you are requesting access rights to the Incomes Register’s API for reporting benefits payment data, also tick the confirmation that your organisation will start using the functions for reporting benefits payment data.
  • Enter information about your organisation’s contact person.
    • You should verify who is responsible for API testing in your organisation or in your customer’s organisation.
    • The certificate’s technical contact person must be entered separately in each certificate request.
  • Finally, submit your application.

You can request a testing certificate immediately after you have submitted your API application. However, you can only retrieve your certificate after your application has been approved.

If the organisation is already using APIs but you want the same artificial organisation to start using a new API, start by selecting an organisation in the list and then select ‘Submit replacement application’. Order own testing certificate for each interface.

If you are responsible for testing on behalf of several parties and you require separate access rights for them, submit a separate API application for each party. As a result, you will receive separate access rights to the service for each artificial organisation.

A staff member must approve the application

Staff members process applications one API at a time. If something needs to be clarified regarding API testing, a staff member will contact the contact person you named in your API application.

You can see which APIs have been approved and which are still waiting for approval in the certificate service’s e-service. Once all APIs have been approved, your testing certificate requests will be processed automatically.

The Positive credit register’s APIs

Users of the Positive credit register APIs do not need to make a separate API application in the certificate service.

A member of staff will save the information on your testing start notification in the service and request the first certificate. The testing contact person indicated on the start notification is also entered as the administrator of the testing group. You can jump to step 4. The technical contact person retrieves the certificate.

If you need more than one testing certificate, request the additional certificates as in step 3. Request a testing certificate.

Select the organisation on whose behalf you are testing.

Select the API for which you want to request a certificate.

• You can enter a brief description for the certificate.
• Enter a technical contact person for the certificate, such as a representative of the software company.
  • The contact person is responsible for the use of the certificate and will receive separate instructions to retrieve the certificate.
  • The contact person will receive a notification of an expiring certificate 60 days before it expires.
• Finally, submit the request.

If the API application has already been approved, the information required to retrieve the certificate will be sent directly to the technical contact person.

Once you have submitted your certificate request, the technical contact person named in the request will receive the information required to retrieve the certificate.

After this, the certificate is available for retrieval for 14 days.

Read more detailed instructions for retrieving a certificate

If you want to change the access rights used in testing or request access to additional Tax Administration or Incomes Register APIs for the testing organisation, sign in to the ‘Testing certificates’ section again and submit a replacement API application.

The replacement application will replace all your previous selections, so make sure to enter all the testing APIs used by the organisation in the application. To submit a replacement application, you must be the group administrator of the testing organisation. Read more about group management.

Complete the replacement application as you did the first one. Do not remove any selections already made in the application if your organisation is still using the selected APIs. If you are no longer using the previously selected APIs, you can remove the selections. In this case, the access rights to the APIs will also end.

The Positive credit register’s APIs

If you test the APIs of the Positive credit register and want to make changes, please contact the register by submitting the contact form for stakeholder testing.