Stripe requires that all organizations use restricted API keys for payment processing. This helps increase payment security and fulfill fraud prevention requirements. This article describes how to generate a restricted API key and update your Bloomerang CRM settings to meet this requirement.
Generate a Restricted API Key in Stripe
To generate a new restricted API key in Stripe, do the following. For detailed instructions, read Using Stripe gateways with Restricted API Key authentication in the Spreedly documentation.
On your Stripe dashboard, Click Developers to go to the Developers page.
Click API keys to view the API keys page.
In the Restricted Keys section, click +Create Restricted Key.
Click Providing this key to another website.
Click Continue.
In the Name box, enter a name for the new API key.
In the URL box, enter
https://crm.bloomerang.co/.Select Customize Permissions for this key.
Set the Permissions and Connect Permissions for the following resource types to Write:
Charges
Customers
PaymentIntents
PaymentMethods
SetupIntents
Tokens
Set the permissions for Webhook Endpoints to Write. This Resource type does not have any Connect Permissions.
Click Create Key.
Click the new API key to copy it to your clipboard.
Click Done.
Add the Restricted API Key in Bloomerang
In Bloomerang CRM, click Settings.
Click Payments.
In the Other Processors section, click Stripe. If you have not updated your Stripe settings with a restricted API key, Stripe is listed in red text on this page.
On the Transaction Processor page, click in the Restricted Key box and paste the API key that you created in the Generate a Restricted API Key in Stripe section.
Click Save.
On the Payments Settings page, confirm that Stripe is listed in blue text in the Other Processors section. This means that the Stripe settings have been updated to use the restricted API key.
Video Walkthrough
You can view a walkthrough of this procedure on YouTube here:
Related
Using Stripe gateways with Restricted API Key authentication in the Stripe documentation