Skip to main content

Authentication

The Sinch Verification platform supports secure authentication mechanisms for both backend integrations and SDK-based client applications.

The Sinch Verification API supports the following authentication methods:

  • Application Signed Request
  • Basic Authentication
  • Public Authentication

Server-to-Server:​

In the Server-to-Server authentication flow, verification requests are initiated directly from backend systems where application credentials and secrets can be securely managed. This approach provides stronger security and is recommended for backend integrations.

  • Application Signed Request

Device-to-Server:​

In the Device-to-Server authentication flow, verification requests are initiated from end-user mobile devices or other untrusted environments. Since application secrets cannot be securely stored on end-user devices, Public Authentication should be used along with the Sinch mobile SDKs. This approach helps enable secure verification flows while protecting sensitive credentials.