# Authentication FAQs

Source: https://developer.avalara.com/vat-ecom/authentication-in-avatax/authentication-faqs/

Below are answers to some common questions that users face when experiencing issues with authentication.

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)Can I use my credentials in both Sandbox and Production environments?](javascript:void\(0\);)

No. Each environment is separate, and each has its own credentials. If you have a Sandbox account, you cannot use that account to log on to Production, and vice versa.

When you receive credentials for AvaTax, it’s important to note which account the credentials are tied to (whether Sandbox or Production). We keep Sandbox and Production credentials separate to help you test your software in Sandbox without the risk of accidentally affecting production data.

If you don’t have access to the Sandbox environment, contact your account admin to add you as a user. More information about adding users is available [in this Knowledge Center article](https://knowledge.avalara.com/bundle/dqa1657870670369_dqa1657870670369/page/Add_a_user_and_set_permissions.html).

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)How do I verify that the service is up?](javascript:void\(0\);)

You can verify that the Avalara service is up by going to [https://status.avalara.com](https://status.avalara.com/).

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)How do I add users?](javascript:void\(0\);)

You can use one of the following methods to create a user:

-   Add users via the AvaTax UI. Refer to [this article](https://knowledge.avalara.com/bundle/dqa1657870670369_dqa1657870670369/page/Add_a_user_and_set_permissions.html) for more information.

-   Use the [CreateUsers](https://developer.avalara.com/api-reference/avatax/rest/v2/methods/Users/CreateUsers/) API to add users to your account. Be sure to set the appropriate `securityRoleID` for each user. Below is an example request.

```
[  {    "id": 12345,    "accountId": 123456789,    "companyId": 123456,    "userName": "bobExample",    "firstName": "Bob",    "lastName": "Example",    "email": "bob@example.org",    "postalCode": "98110",    "securityRoleId": "AccountUser",    "passwordStatus": "UserCanChange",    "isActive": true  }]
```

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)How do I identify a firewall or proxy server?](javascript:void\(0\);)

Refer to the [Troubleshooting](/vat-ecom/authentication-in-avatax/troubleshooting) topic for more information.

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)How do I reset my license key?](javascript:void\(0\);)

Use one of the following methods to reset your account license key.

-   Reset your license key through the AvaTax UI. Refer to [this article](https://knowledge.avalara.com/bundle/dqa1657870670369_dqa1657870670369/page/License_keys.html) for more information.

-   Use the [AccountResetLicenseKey](https://developer.avalara.com/api-reference/avatax/rest/v2/methods/Accounts/AccountResetLicenseKey/) API to reset your license key. Please keep in mind the following when deciding to reset your license key:

    -   The AccountResetLicenseKey API is only available to account administrators for the account in question.

    -   Resetting the key breaks all existing connections instantly.

    -   When you call this API, all account administrators for this account will receive an email with the newly updated license key. The email will specify which user reset the license key and it will contain the new key to use to update your connectors.

Below is an example request.

```
{  "accountId": 123456789,  "confirmResetLicenseKey": true}
```

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)How do I reset my password?](javascript:void\(0\);)

Go to your Avalara Portal account sign in page and click **Forgot your password?** You'll be redirected to a page to type in your username or email address. You’ll receive a reset link via email with further instructions on how to reset your password. More information is available in [this article](https://knowledge.avalara.com/bundle/dqa1657870670369_dqa1657870670369/page/Reset_your_Avalara_password.html).

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)I’m using .NET Nuget AvaTax package to connect to AvaTax. Are account ID and license code enough for AvaTax API authentication?](javascript:void\(0\);)

Yes, you can use either username/password or account id/license for authentication. However, if you're a technology partner, then you must also populate the [X-Avalara-Client http header](https://developer.avalara.com/avatax/client-headers/) with all your calls. You’ll need to set your integration's (app name's) element to this immutable value that identifies your integration.

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)Is TLS required?](javascript:void\(0\);)

Yes.

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)What authentication methods are supported?](javascript:void\(0\);)

[Basic](https://en.wikipedia.org/wiki/Basic_access_authentication) is the only authentication type currently supported. A future version will add support for [OAuth](https://en.wikipedia.org/wiki/OAuth).

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)What is the production URL?](javascript:void\(0\);)

[https://rest.avatax.com](https://rest.avatax.com/)  

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)What is the sandbox URL?](javascript:void\(0\);)

[https://sandbox-rest.avatax.com](https://sandbox-rest.avatax.com/)  

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)What ports are used for communication?](javascript:void\(0\);)

AvaTax uses port 443.

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)Where can I get the SDK?](javascript:void\(0\);)

SDKs for supported languages are available at [https://developer.avalara.com/sdk/](https://developer.avalara.com/sdk/).

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)Where do I input the client ID?](javascript:void\(0\);)

Add the client ID to the HTTP header for the REST API or as part of the client config if using the SDK.

[![Closed](https://avalara-devdocs-prod.mcoutput.com/vat-ecom/Skins/Default/Stylesheets/Images/transparent.gif)Whom do I contact if my sandbox is expired?](javascript:void\(0\);)

Contact your [account manager](https://help.avalara.com/Your_Account/Contact_your_account_manager) if your Sandbox is expired. Or you can become a technology partner and receive a free Sandbox account that doesn't expire. Refer to the [Partner Program](https://www.avalara.com/us/en/partners/partner-programs.html) page for more information.