# HTTP API

> Add Ironchip verification to an in-house application with an MFA integration and its API key: create the integration, add the application and grant access.

URL: https://docs.ironchip.com/en/identidad/protocolos/http-api/

HTTP authentication lets you add Ironchip verification to an in-house application: the backend calls the API with an API key, and Ironchip asks the user for approval on their device. It is a way to support authentication through standard HTTP calls, with no SDK and from any language.

## How it works

1. The user tries to access the in-house application.
2. The application makes an HTTPS GET call to the Ironchip endpoint with the user identifier.
3. Ironchip shows the user the usual authentication flow (push, USB, NFC, etc.).
4. When the user finishes, the endpoint returns the validated identity.
5. The application uses that response to grant or deny access.

The integration does not change the application's existing authentication logic.

## Requirements

- An administrator account in the Ironchip admin console.
- Access to the backend code of the application you want to protect.
- The users enrolled in Ironchip, or [identity synchronization](https://docs.ironchip.com/en/identidad/administracion/sincronizacion/) configured.
- The company created in Ironchip. See [Integration protocols](https://docs.ironchip.com/en/identidad/protocolos/) for the data to prepare.

## Create the MFA integration

In **Applications > MFA Integrations** you can see all the HTTP-MFA integrations that have been added to Ironchip.

1. Click **Add MFA**. A new window opens.

   [Image: MFA Integrations section, under Applications, with the Add MFA button]

2. In the **Add new MFA** window, enter the name of the MFA integration in **Name** and click **Continue**. Choose a name that is easy to recognize: it is the one that appears in **Application integration type** when you add the application.

   [Image: Add new MFA window with the Name field]

3. The **Credentials of new HTTP-MFA integration** window shows the **API KEY**. Save it or download it with **Download**: for security, you cannot view it again from the console. You will use it to configure services with Ironchip.

   [Image: Window with the API Key generated for the integration]

## Add the application to the company

The **Applications** section lists all the protected services that have been added to Ironchip and their integration type.

1. Click **New Application**. The **Add new application** window opens.

   [Image: Applications section with the New Application button highlighted]

2. In the **Application Details** step, enter the application name in **Name**.
3. In **Application integration type**, select the name you gave the MFA integration in the previous section.
4. Click **Next** and complete the **Upload Logo** step to finish. The application appears in the **Applications** section.

## Grant access to users and groups

1. In **Applications**, click **Add** in the **Add access** column of the application. The **Add a new access** window opens.
2. In **Select a group**, search by name with **Search by name**, check the **Add** box of the users or groups that get access and click **Next**.

   [Image: Select a group step of the Add a new access window, with the list of users and groups]

3. In **Select usernames**, check the format of the external username (**External Username**), email by default, and click **Next**.

   :::note
   The username must be the same as the user's account name in the application.
   :::

4. In **Select authentication policies**, choose the [authentication policies](https://docs.ironchip.com/en/identidad/conceptos/politicas/) required for access, for example **Any user devices** AND **Any user safezones**, and click **Next**.
5. In **Review**, check the summary and click **Add**.

The access is created with the selected configuration. You can change it at any time with the access's **Options** button. The details of each step are in [Grant access to users and groups](https://docs.ironchip.com/en/identidad/administracion/aplicaciones/#grant-access-to-users-and-groups).