How to Obtain Production CSID and Is It Necessary After Creating Compliance CSID?

XML and business rules
1

I have successfully created the Compliance CSID by sending the CSR and OTP to you. Now, I would like to understand how to obtain the Production CSID. Is it mandatory for integration and for the device to appear on the Fatoora platform when sending electronic invoices? Or is the Compliance CSID sufficient for this purpose? Please clarify and provide the necessary steps if obtaining the Production CSID is required.

Thank you.

2

Dear @working123,

Thank you for your inquiry regarding the Compliance CSID and Production CSID for integration with the Fatoora platform. Please note that the Production CSID is mandatory, and we recommend you start testing it thoroughly in the simulation environment before proceeding to production.

Our recommendation is to complete the compliance check and transition to the production environment only after carefully reviewing the technical documentation available on ZATCA’s website. This ensures a full understanding of all regulatory requirements before proceeding with live operations.

Below are some helpful links to documentation and tools provided by ZATCA:

  1. XML Standard and 1. Data Dictionary: Technical requirements & Specifications
  2. API Integration Sandbox: Zatca
  3. Web based validator: Zatca
  4. Developer Community: https://zatca1.discourse.group/
  5. E-invoicing Detailed Technical Guidelines: https://zatca.gov.sa/en/E-Invoicing/Introduction/Guidelines/Documents/E-invoicing-Detailed-Technical-Guideline.pdf

Steps to Obtain the Production CSID:
1. Prepare Your CSR File:
• Create a CSR file using the Fatoora SDK or another supported method.
• Use the command fatoora -CSR -csrConfig –[config file path] to generate the CSR file.
2. Generate the OTP:
• Log in to the Fatoora portal (production or simulation, based on purpose) to generate an OTP.
3. Send the CSR Request:
• Use the CSR in the body of your API request and the OTP in the header.
• For Production, use this API URL:
https://gw-fatoora.zatca.gov.sa/e-invoicing/core/compliance
• For Simulation, use this API URL:
https://gw-fatoora.zatca.gov.sa/e-invoicing/simulation/compliance
4. Receive Compliance CSID Details:
• The response will include:
• BinarySecurityToken and Secret for authentication in compliance checks.
• Request_ID for use in subsequent steps.
5. Complete Compliance Checks:
• Prepare and validate invoices according to the invoice type specified in your configuration file:
• Simplified Invoices (0100)
• Standard Invoices (1000)
• Both (1100)
• Ensure compliance for invoice, credit note, and debit note to avoid “Missing Compliance Steps.”
6. Transition to the Production CSID:
• Replace the Request_ID in the API request body to generate the Production CSID (PCSID).
• For Production, use this API URL:
https://gw-fatoora.zatca.gov.sa/e-invoicing/core/production/csids
• For Simulation, use this API URL:
https://gw-fatoora.zatca.gov.sa/e-invoicing/simulation/production/csids

For any further concerns, please reach out to your RM or contact our support team at the email below:
SP Mail: sp_support@zatca.gov.sa

Best regards,