Prerequisites

Before you can integrate, you need a Kustodyan account with the Configuration role on the portal. Onboarding is invite-only; contact your Kustodyan representative to request access.

Configuration steps

Inside CoreAdmin (/coreadmin), the typical setup order is:

1. Create a target for your application.
2. Add a configuration to the target.
3. Define data instances (class and property) for every field you want to protect.
4. Build transformer sequences (for example, tokenize, or decrypt then mask).
5. Define rights contexts that map evidence such as Role to allowed actions on each data instance.
6. Define processing contexts that map evidence such as Action: Protect and Action: Unprotect to transformer sequences.
7. Generate an API client (Global or context-scoped) for your configuration: click the three dots next to the configuration name, then create a client and download the client_id and client_secret.

Once that is in place you can authenticate and start calling the Transform API.