> For the complete documentation index, see [llms.txt](https://docs.vida.id/identity-stack/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.vida.id/identity-stack/authentication/authentication-factors/cryptographic-token-pki/partner-integration-infrastructure.md).

# Partner Integration Infrastructure

The partner integration infrastructure involves the interaction of three key systems: 

* The partner mobile application built using VIDA mobile CDK
* The partner server
* The VIDA authentication credential services.

 To ensure secure communication, all transactions should be carried out over secured TLS channels, maintaining the privacy of exchanged information across communication devices.

### *Establishing Trust and PKI-Based Workflow*

<figure><img src="/files/zJKNRwDixxkLIiLDHdmW" alt=""><figcaption></figcaption></figure>

**VIDA Mobile CDK Trust Establishment**: The VIDA mobile CDK, integrated into the partner's mobile application, needs to establish trust with the VIDA authentication credential services. This trust is established using a bearer token. The bearer token serves as a form of authentication, verifying the identity and permissions of the mobile application.

**Partner Backend Server Trust Establishment**: Similarly, the partner backend server, responsible for handling server-side operations, also needs to establish trust with the VIDA authentication credential services. The server accomplishes this by obtaining its own bearer token, which is used to authenticate and authorise the server's requests to the VIDA authentication credential services.

The bearer token mechanism allows both the VIDA mobile CDK and the partner backend server to securely communicate and interact with the VIDA authentication credential services, ensuring that only authorized entities can access and utilize the services.

### *Obtaining a Bearer Token*

<figure><img src="/files/xjGp6fwgueOlqKMqBNxI" alt=""><figcaption></figcaption></figure>

The bearer token can be obtained by the partner backend server as follows:

1. The partner server sends a shared secret to the VIDA authentication server.
2. In response, the partner server receives a short-duration bearer token.
3. The partner server sends a request to the VIDA authentication credential services endpoint, including the bearer token in the HTTP authorization header.&#x20;

Authorization: Bearer <\<BEARER TOKEN OBTAINED IN STEP 1>>&#x20;

Note: Bearer tokens are valid for 300 seconds. Once expired, a new token must be obtained.