External client applications can make business entity service requests to the MDM Hub. You must register the external client application users as trusted application users in the MDM Hub. You must also register the public certificate for the users associated with the external client application.

After registration, the external client users can send encrypted authentication requests to the MDM Hub using the private key. The MDM Hub decrypts the authentication request using the public key and responds with requested data in plain text.

User authentication requests for Business Entity Services payload are encrypted using the private key and are decrypted using the public key.

For more information about how to configure trusted applications and certificate based authentication, see the Certificate Based Authentication chapter in the Informatica Multidomain MDM 10.4 Security Guide.