Connect supplier information to your ecosystem.
Use SDS integration services to exchange authorized supplier information, reflect program and module requirements, and keep downstream business systems aligned with SupplierSync™.
supplier-profile.sh
# Illustrative example curl --request GET \ --url https://api.example.supplierds.com/v1/\ suppliers/sup_example/profile \ --header "Authorization: Bearer $SDS_TOKEN" \ --header "X-SDS-Workspace: ws_example" # Response { "supplier_id": "sup_example", "status": "active", "modules": [ "contacts", "certifications", "compliance" ] }
From access to first synchronized record.
1
2
3
4
ERP agnostic by design.
Your enterprise systems
SDS integration layer
Buyer workspace & programs
⇄
On this page
Request access and confirm environments
Begin with an approved integration use case. SDS will associate technical access with the appropriate organization, workspace, environment, permissions, and data scope.
- Name an integration owner and security contact.
- Define inbound, outbound, or bidirectional information flows.
- Confirm the relevant supplier population and information modules.
- Separate non-production and production credentials.
Do not place credentials in client-side code. Store secrets in an approved server-side secret manager and rotate them according to your security practices and SDS requirements.
Authenticate server-to-server requests
curl --request POST \ --url https://auth.example.supplierds.com/oauth/token \ --header "Content-Type: application/x-www-form-urlencoded" \ --data-urlencode "grant_type=client_credentials" \ --data-urlencode "client_id=$SDS_CLIENT_ID" \ --data-urlencode "client_secret=$SDS_CLIENT_SECRET" \ --data-urlencode "scope=suppliers:read modules:read"
Select the buyer workspace and program
GET /v1/workspaces
Authorization: Bearer <token>
{
"data": [{
"workspace_id": "ws_example",
"name": "Example Buyer Workspace",
"programs": ["prg_supplier_information"]
}]
}Resolve the SDS supplier identity
GET /v1/suppliers?external_id=VENDOR-10482
Authorization: Bearer <token>
X-SDS-Workspace: ws_example
{
"data": [{
"supplier_id": "sup_example",
"external_ids": [{"system":"erp","value":"VENDOR-10482"}],
"match_status": "confirmed"
}]
}Identity is foundational. A supplier match should be confirmed before module data is synchronized or a new profile is created.
Read or submit authorized module data
GET /v1/suppliers/sup_example/modules/certifications
Authorization: Bearer <token>
X-SDS-Workspace: ws_example
{
"module": "certifications",
"schema_version": "example-1",
"records": [{
"type": "example_certification",
"status": "current",
"valid_to": "2027-06-30",
"updated_at": "2026-08-10T18:42:00Z"
}]
}Subscribe to change events
{
"event_id": "evt_example",
"event_type": "supplier.module.updated",
"occurred_at": "2026-08-10T18:42:00Z",
"workspace_id": "ws_example",
"supplier_id": "sup_example",
"module": "certifications",
"schema_version": "example-1"
}- Verify the event signature before processing.
- Use the event ID for idempotency and duplicate protection.
- Return the required success response promptly.
- Fetch the authoritative record when the event is a change notification.
Complete production readiness
Design for recovery. Your integration should be able to replay safely, reconcile counts and timestamps, isolate failed records, and resume without creating duplicates.
Map only what your program requires.
- Environment and base URL confirmed
- Scopes and workspace permissions minimized
- Supplier identity mapping validated
- Module schemas and versions approved
- Rate-limit and retry behavior implemented
- Webhook verification and idempotency tested
- Monitoring, alerting, and reconciliation enabled
- Business purpose and data ownership defined
- Buyer and supplier responsibilities documented
- Higher-sensitivity fields reviewed
- Retention and deletion requirements confirmed
- Security and privacy review completed
- Support and incident contacts established
- Go-live and rollback decisions assigned