# Create a Sandbox Project source: https://developer.mastercard.com/user-account-management-service/documentation/tutorials-and-guides/sandbox-access-tutorial/index.md This guide walks through the steps required to create a new Mastercard Loyalty Management project and how to gain access to the Sandbox environment. #### What you will learn {#what-you-will-learn} * How to create Mastercard Developers Sandbox project * How to configure it * How to set up test data (see the [Testing](https://developer.mastercard.com/user-account-management-service/documentation/testing/index.md) page) ## Create a Project {#create-a-project} The MRS User Management supports both **OAuth 1.0a** and **OAuth 2.0** authentication. Choose the path that matches your authentication preference. ### OAuth 1.0a Project {#oauth-10a-project} 1. Go to your [My Projects](https://developer.mastercard.com/dashboard) page. 2. Click the **Create New Project** button in the upper right portion of the screen. ![My Projects](https://static.developer.mastercard.com/content/user-account-management-service/img/myprojects.png) 3. Enter a descriptive name for your project. ![Name project](https://static.developer.mastercard.com/content/user-account-management-service/img/configureprojects.png) 4. Indicate whether you are creating a project on behalf of a client (optional). 5. Click on the **Select your API service** dropdown list and select the **MRS User Management** option. ![Create new project](https://static.developer.mastercard.com/content/user-account-management-service/img/oauth2-selectapis.png) 6. When prompted, select **OAuth 1.0a** as your authentication method. 7. Enter the key alias and keystore password for generating your OAuth 1.0a signing key. ![Project Credentials](https://static.developer.mastercard.com/content/user-account-management-service/img/projectcredentials.png) 8. Click **Confirm and Continue** to complete the Sandbox setup. ### OAuth 2.0 Project {#oauth-20-project} 1. Go to your [My Projects](https://developer.mastercard.com/dashboard) page. 2. Click the **Create New Project** button in the upper right portion of the screen. ![My Projects](https://static.developer.mastercard.com/content/user-account-management-service/img/myprojects.png) 3. Enter a descriptive name for your project. ![Name project](https://static.developer.mastercard.com/content/user-account-management-service/img/configureprojects.png) 4. Indicate whether you are creating a project on behalf of a client (optional). 5. Click on the **Select your API service** dropdown list and select the **MRS User Management** option. ![Create new project](https://static.developer.mastercard.com/content/user-account-management-service/img/oauth2-selectapis.png) 6. When prompted, select **OAuth 2.0** as your authentication method. ![Select OAuth 2.0 authentication](https://static.developer.mastercard.com/content/user-account-management-service/img/oauth2-selectauthmethod.png) 7. Enter the key alias and keystore password to generate your OAuth 2.0 signing key. ![Project Credentials](https://static.developer.mastercard.com/content/user-account-management-service/img/oauth2-credentials.png) 8. Click **Confirm and Continue** to complete the Sandbox setup with OAuth 2.0 enabled. ## Add Mastercard Loyalty Management API to your project {#add-mastercard-loyalty-management-api-to-your-project} (This step is included in the project creation flow above. If you need to add the API to an existing project, follow these steps.) 1. Click on the **Choose API** dropdown list and select the **Mastercard Loyalty Management** option. 2. Click **Continue** . ![Create new project](https://static.developer.mastercard.com/content/user-account-management-service/img/createnewproject.png) ## Name Your Project {#name-your-project} 1. Enter a descriptive name for your project and click **Continue**. 2. You can optionally choose to invite other people to your project by selecting the **Invite Team Members** option. Invited members will have full access to the project. ![Name project](https://static.developer.mastercard.com/content/user-account-management-service/img/nameproject.png) ## Sandbox OAuth Credentials {#sandbox-oauth-credentials} The User Account Management Service supports both **OAuth 1.0a** and **OAuth 2.0** authentication methods. Follow the steps below for the authentication method you are using. ### OAuth 1.0a Credentials {#oauth-10a-credentials} 1. After the project is successfully created, the Sandbox .P12 access credentials will be available for download. 2. Click the **Download PKCS#12 Keystore** button to download a zip file containing the .p12 file required for OAuth authentication in Sandbox. 3. Click **Continue** . Note: You are required to capture the Keystore password and key alias shown on the screen. The Keystore password is used in conjunction with the .p12 file and Client ID for OAuth 1.0a authentication. Click **Confirm and Continue** to complete the Sandbox setup process. ![Download signing key](https://static.developer.mastercard.com/content/user-account-management-service/img/downloadkey.png) ![Sandbox continue](https://static.developer.mastercard.com/content/user-account-management-service/img/sandboxcontinue.png) ### OAuth 2.0 Credentials {#oauth-20-credentials} If your project is enabled for OAuth 2.0 authentication, complete the Sandbox credential steps below: 1. In your [Developer Dashboard](https://developer.mastercard.com/dashboard), open the project and navigate to **Sandbox Keys**. 2. Select **OAuth 2.0** credentials for the API and review the generated key details. 3. Download the key package and copy the **Client ID** for your application configuration. 4. Complete the flow by selecting **Confirm and Continue** to finish Sandbox key setup. ![Sandbox OAuth 2.0 keys](https://static.developer.mastercard.com/content/user-account-management-service/img/oauth2-sandboxkeys.png) Note: Capture and securely store the key alias and keystore password shown during setup. You can renew or rotate keys later from the project dashboard, so you do not need to create a new project each time a key is updated. Tip: OAuth 2.0 may require additional enablement steps before credentials are available. For detailed setup instructions, refer to the [Using OAuth 2.0 to Access Mastercard APIs](https://developer.mastercard.com/platform/documentation/authentication/using-oauth-2-to-access-mastercard-apis/#step-by-step-implementation). ### Sandbox Client ID {#sandbox-client-id} Sandbox access is available immediately after your Sandbox credentials are created, so you do not need to share your Sandbox Client ID with Mastercard before testing. You will share your **Production** Client ID with your Implementation Manager when you move to Production. For more details on supported authentication methods, see [API Basics - Client Authentication](https://developer.mastercard.com/user-account-management-service/documentation/api-basics/index.md#client-authentication). ## Generate Encryption Keys {#generate-encryption-keys} 1. After the sandbox consumer key is downloaded, the encryption keys are auto-generated. The Client Encryption key will be used to encrypt the request and Mastercard Encryption key will be used to decrypt the response. 2. Click **Next** to generate a 2048-bit key pair that will be used for the User Account Management API calls. ![Create encryption keys](https://static.developer.mastercard.com/content/user-account-management-service/img/createencryptionkeys.png) ![Key alias and password](https://static.developer.mastercard.com/content/user-account-management-service/img/keyaliasandpassword.png) 5. Click **Confirm** and **Continue** to proceed. ![Saved keystore credentials](https://static.developer.mastercard.com/content/user-account-management-service/img/savedkeystorecredentials.png) 6. After confirmation, you will receive an email confirming the provisioning request and keys. ## Download Encryption Key {#download-encryption-key} 1. After the sandbox is provisioned to download the Encryption keys, navigate to **My Projects** and select your project. 2. Open the **Actions** dropdown next to **Client Encryption Keys** and click **Download Encryption Key** . ![Sandbox keys](https://static.developer.mastercard.com/content/user-account-management-service/img/sandboxkeys.png) Note: **Mastercard Encryption Keys** will be automatically downloaded upon project creation. ## Sandbox Access {#sandbox-access} Sandbox access is available immediately after your project is created and returns mocked data, so no Mastercard configuration is required to start testing in Sandbox. When you are ready to move to Production, you will provide your **Production** Client ID to your Mastercard Product Delivery or Customer Implementation Services Implementation Manager (CIS IM) so that it can be mapped to your program. See [Move Project to Production](https://developer.mastercard.com/user-account-management-service/documentation/tutorials-and-guides/production-access-tutorial/index.md) and the [Onboarding Checklist](https://developer.mastercard.com/user-account-management-service/documentation/tutorials-and-guides/onboarding-checklist/index.md). For any questions please submit a request by clicking Get Help [here](https://developer.mastercard.com/user-account-management-service/documentation/support/index.md). ## Ready to Test in Sandbox {#ready-to-test-in-sandbox} You now have everything you need to start sending User Account Management Service requests to the Sandbox! It is recommended to test the full functionality of the User Account Management in the Sandbox environment.