> ## Documentation Index
> Fetch the complete documentation index at: https://docs.acealliance.capital/llms.txt
> Use this file to discover all available pages before exploring further.

# Receive your credentials

Ace Alliance sends a secure link. You create the client secret from it. The secret is shown one time.

<Steps>
  <Step title="Open the secure link">
    The link opens one time and expires 72 hours after it was sent.
  </Step>

  <Step title="Copy the client ID">
    The page names the environment and shows the client ID.
  </Step>

  <Step title="Select Generate secret">
    The secret appears one time. Copy it into your secrets vault before you close the page.
  </Step>
</Steps>

<Warning>
  The secret cannot be shown again. If it is lost, ask for a new link and create a new secret.
</Warning>

Store the secret in a secrets vault. Send it only to the token endpoint over HTTPS. Never send it by email or chat.

## If the link does not open

`This link is not available` means the link expired, was already opened, or was replaced by a newer link. Ask for a new link. Secrets you already hold are not affected.

## Rotate the secret

A client holds up to two active secrets at the same time.

<Steps>
  <Step title="Ask for a second link and create the second secret" />

  <Step title="Switch your integration to the second secret" />

  <Step title="Ask Ace Alliance to revoke the first secret">
    Token requests with the revoked secret fail from that moment. Tokens already issued expire within one hour.
  </Step>
</Steps>

If a secret may have been exposed, ask for a rotation at once.