On June 1, 2023 we release a new version of the Visma.net Financials connector with improved security. For this improved way of authentication the SuperUser needs to reauthenticate to Visma.net after the release.
How do you know that you need to reauthenticate?
Your existing DataBridge profiles that import into Visma.net or export from Visma.net will fail. The exception that is shown in logs are similar to “Error calling Visma.net endpoint (https://integration.visma.net/API/controller/api/v1/customer/customerClass) Invalid parameter exception: ipp-company-id (12002_12002_4fb0cef1-5119-42f7-a21e-e8877e6d15a2)“.
How to reauthenticate?
The new Visma authentication for applications like DataBridge for SuperOffice is based on a new role called ‘API User’. In this article we’ll show you how to add that role to a new user. However you can also edit an existing user to allow that role. What you choose depends on your security principals.
Log on to Visma.net Admin and go to Users and Roles.
Select an existing user or add a new user and provide that user with the role ‘API User’ for the companies that DataBridge for SuperOffice needs access to. Note that you need to add the role for each company that you would like to give DataBridge for SuperOffice access to.
Save the details for that user.
If you have created a new user: follow the steps as indicated by Visma.net to activate the new user.
If you have opted to add the role to an existing user, make sure you have the credentials to proceed with the following steps.Log on to DataBridge for SuperOffice and select profile that you need to reauthenticate by clicking Edit Profile.
In the section Visma.net Financials click the Connected button. This will open up the Visma.net Login page.
Log on with the user that you have given the Visma role ‘API User' in the step 2-4.
If you are still logged in with any other user that does not have the ‘API User’ role, an error message will be shown in the Visma.net authentication screen. In that case open up DataBridge for SuperOffice in an incognito browser session or log out of Visma.net for the current user. You may do this from the error message that is shown.Select the company that you want to process the data from. A consent dialog will be shown next.
Accept the consent. You will be redirected to the DataBridge for SuperOffice screen.
You are now reauthenticated for the selected profile.
Do you have more than one profile that connects to Visma.net?
The new Visma authentication needs you to authenticate per DataBridge profile, no matter if you connect to the same Visma company in different profiles. This means that you need to repeat the steps 5-10 from the section above for each profile.
Due to an issue with Visma’s new authentication method, you need to repeat the steps 5-10 for each DataBridge profile in a fresh incognito browser.