Aqid ERPWhat the portal is for
In Phase 2 every system or device that issues invoices (ZATCA calls each one an EGS unit) holds its own cryptographic stamp identifier, the CSID, which signs every invoice it issues. The portal is where a business asks for those identifiers, sees which units hold one, renews them and withdraws them.
- Generate one-time passwords (OTPs) to onboard new units.
- See the list of onboarded units and the state of each one's CSID.
- Renew a CSID before it expires, and revoke a unit you no longer use.
Logging in
The portal uses the same username and password as the business's ZATCA e-services account (the one used to file VAT returns). An accountant or a staff member logs in with the business's account, or with their own if the business has given it access. The developer portal, where software makers test their systems, is a separate site with separate accounts.
Onboarding a unit with a one-time password
Onboarding is how a unit receives its CSID. In the portal, choose to onboard new solution units, say how many, and the portal shows one OTP for each. Each OTP is entered in the invoicing system, which uses it to request its CSID from ZATCA. An OTP is valid for one hour after it is generated; one that expires is simply generated again.
- Generate the OTP only when the system is ready to use it.
- Each unit, a branch's point of sale or a cloud account, needs its own OTP.
- Once onboarded, the unit appears in the portal's list of devices.
Renewing and revoking
A CSID has an expiry date. Renewal is done before that date, from the portal, with a new OTP for the unit; it replaces the old identifier with a new one. Revoking a unit, from the same list, ends its identifier at once and cannot be undone: a unit revoked by mistake has to be onboarded again as a new device. ZATCA also revokes a business's identifiers itself if its VAT registration is cancelled or suspended.
How Aqid ERP uses it
A Saudi company in Aqid ERP is one EGS unit. When ZATCA's wave letter arrives, Upgrade to Phase 2 on the Compliance page asks for the OTP: generate one in the Fatoora portal, paste it within the hour, and the company is onboarded. From then on every invoice is signed with the company's CSID, and cleared or reported, with ZATCA's answer kept with the invoice.