Provider Hub & Connector Activation
Governed onboarding of portals, banks, e-signature, messaging, screening, attendance, storage and AI providers: profiles with legal vendor and accreditation, vault secret references only, activation gates with required proofs, and sandbox → production promotion. Used by integration administrators, domain owners, security and approvers.
CFG-09
PRV-01
PRV-02
PRV-03
PRV-04
UX-28
Provider profiles
18
across 8 capabilities
Production active
11
all healthy
Sandbox / certification
4
2 in contract tests
Blocked activations
2
missing gates — see below
Secrets due rotation ≤ 30 d
3
custodian notified
Fallback drills (Q3)
6 / 7
1 scheduled 24 Jul
Provider profiles
selected row opens gates panel below| Profile | Capability | Legal vendor · accreditation | Env | Auth reference (vault) | Rotation | Owner | State |
|---|---|---|---|---|---|---|---|
| PF-PORTAL-PROD Property Finder syndication | Property portal | PropertyFinder FZ-LLC · DED lic. 738112 | Production | vault://kv/portals/pf-api | Rotated 02 Jul | Elena Petrova | Production active |
| BAYUT-PORTAL-01 Bayut listing channel | Property portal | Bayut / Dubizzle Group · DED lic. 692340 | Sandbox | vault://kv/portals/bayut-api | Created 28 Jun | Elena Petrova | Activation blocked — gate missing |
| DLD-TRAKHEESI-PROD authority connector — permits | Authority (real estate) | Dubai Land Department · government | Production | vault://kv/authority/dld-trakheesi | Due 09 Aug | Mariam Al Suwaidi | Production active |
| ENBD-H2H-PROD bank host-to-host + statements | Banking | Emirates NBD PJSC · CBUAE licensed | Production | vault://kv/banks/enbd-h2h | Rotated 14 Jul | Fatima Rashid | Production active |
| SIGNGULF-PROD e-signature — contracts class A/B | E-signature | SignGulf Technologies LLC · eIDAS-equiv. cert 2025-114 | Production | vault://kv/esign/signgulf | Rotated 30 Jun | Mariam Al Suwaidi | Production active |
| WA-BSP-PROD WhatsApp Business BSP | Messaging | GulfComm BSP DMCC · Meta partner #7741 | Production | vault://kv/msg/wa-bsp | Due 02 Aug | Vikram Nair | Production active |
| SCREEN-SENTINEL-PROD sanctions/PEP screening feed | Screening | Sentinel Screening Ltd · DPA-2025-114 | Production | vault://kv/screening/sentinel | Rotated 05 Jul | Ahmed Al Blooshi | Production active |
| BIOTIME-ATT-PROD attendance devices — 2 sites | Attendance | GulfTech Facilities LLC (integrator) | Production | vault://kv/hr/biotime | Overdue 06 Jul — escalated | Vikram Nair | Active — rotation overdue |
| AIGW-AZUAE-PROD AI gateway — UAE region models | AI | Microsoft Azure (UAE North) · ISO 27001/27701 | Production | vault://kv/ai/azure-uae | Rotated 10 Jul | Vikram Nair | Production active |
| EMAAR-PORTAL-SBX developer feed (evaluation) | Property portal | Contract under legal review | Sandbox | vault://kv/portals/emaar-sbx | Created 11 Jul | Elena Petrova | Sandbox — contract tests running |
| SMS-ETIS-PROD SMS gateway — e& UAE | Messaging | e& UAE (Etisalat) · TDRA licensed | Production | vault://kv/msg/etisalat-sms | Rotated 20 Jun | Vikram Nair | Production active |
| UAEPASS-SIGN-CERT qualified signature (gov identity) | E-signature | UAE PASS · government | Certification | vault://kv/esign/uaepass | Created 01 Jul | Mariam Al Suwaidi | Security review scheduled |
12 of 18 profiles
Promotion state — BAYUT-PORTAL-01 (Bayut listing channel)
Blocked at production gate
Draft profile
Sandbox connected
Contract & schema tests
Security & privacy review
Activation gates
Production scheduled
Production active
Activation gates & required proofs
6 of 7 passed| Gate | Required proof | Evidence | Result |
|---|---|---|---|
| Sandbox connection | Successful auth + heartbeat 72 h | Test run TR-3311 · 09–12 Jul | Pass |
| Contract tests | All consumer-driven contract tests green | 42 / 42 · pipeline #8841 | Pass |
| Schema validation | Field mapping vs channel schema v3.2 | Mapping doc MAP-BYT-07 | Pass |
| Security review | Webhook signature + rate limit + timeout set | SEC-REV-2026-041 approved | Pass |
| Privacy / data-class review | Data classes & purposes within PRV-04 profile | PRIV-REV-2026-033 approved | Pass |
| Reconciliation mapping | Status mapping + daily reconciliation schedule | Missing | Fail — blocks activation |
| Rollback plan | Deactivation runbook + listing unpublish path | RBK-BYT-01 approved | Pass |
Profile declaration (PRV-04 universal controls)
Sandbox- Capability
- Property portal — publish, update, unpublish, lead ingest
- Endpoint
https://api.sandbox.bayut.example/v3- Auth reference
vault://kv/portals/bayut-api· Test OK 17 Jul 06:10- Webhook signature
- HMAC-SHA256 · secret ref
vault://kv/portals/bayut-wh - Rate limit / retry
- 60 rpm · retry x5 exponential · timeout 20 s
- Data classes
- Listing content, media, public agent contact — no KYC/finance
- Subprocessors
- 1 declared (CDN, UAE PoP)
- Exit / portability proof
- Export spec EXP-BYT-02 approved
- Fallback
- PF-PORTAL-PROD (primary stays) — see routing below
Capability routing — primary / fallback policy
No provider IDs in business records| Capability | Primary | Fallback | Failover mode | Last drill |
|---|---|---|---|---|
| Portal syndication | PF-PORTAL-PROD | — (BAYUT pending gates) | Manual | — |
| E-signature (class A/B) | SIGNGULF-PROD | UAEPASS-SIGN (cert.) | Manual per document class | 26 Jun · Pass |
| SMS | SMS-ETIS-PROD | SMS-DU-STBY | Auto on 5xx > 2 min | 30 Jun · Pass |
| WA-BSP-PROD | NONE — exit proof on file | Queue + alert | 30 Jun · Pass | |
| Screening feed | SCREEN-SENTINEL-PROD | Cached lists (read-only) | Auto, degrade-safe hold | 08 Jul · Pass |
| Bank statements | ENBD-H2H-PROD | Manual file upload | Manual | 24 Jul · Scheduled |
| AI models | AIGW-AZUAE-PROD | AIGW-LOCAL-STBY | Auto by gateway policy | 12 Jul · Pass |
Secret references & rotation (vault-managed)
References only — no plaintext| Vault reference | Used by | Rotation policy | Next rotation | Last connection test |
|---|---|---|---|---|
vault://kv/portals/pf-api | PF-PORTAL-PROD | 90 d | 30 Sep 2026 | OK · 17 Jul 06:00 |
vault://kv/banks/enbd-h2h | ENBD-H2H-PROD | 60 d + cert pinning | 12 Sep 2026 | OK · 17 Jul 05:30 |
vault://kv/msg/wa-bsp | WA-BSP-PROD | 90 d | 02 Aug 2026 | OK · 17 Jul 06:00 |
vault://kv/hr/biotime | BIOTIME-ATT-PROD | 90 d | Overdue since 06 Jul | OK · 17 Jul 04:45 |
vault://kv/screening/sentinel | SCREEN-SENTINEL-PROD | 30 d (high sensitivity) | 04 Aug 2026 | OK · 17 Jul 03:15 |
vault://kv/esign/signgulf | SIGNGULF-PROD | 90 d | 28 Sep 2026 | OK · 16 Jul 22:00 |
Rotation executed by Secrets Custodian only; admins see status + metadata. Overdue rotation raised as drift alert in Runtime & observability.
Request production activation — EMAAR-PORTAL-SBX
Maker cannot approve; approval binds the profile content hash.
Static render mockup — no live data. Source: ERP Modern Development Specification v2.0 · Covers: CFG-09 (Provider Hub & connector activation), with configuration catalogue refs PRV-01…PRV-04 and UX-28. Acceptance shown: sandbox-passed portal blocked at production for missing reconciliation mapping (ERR-PRV-GATE-RECON).