> ## Documentation Index
> Fetch the complete documentation index at: https://docs.symmetry.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Licensing

> How SPF licensing works across the API, Hosted, and On-Premise: the credentials you're issued and what each one unlocks.

Access to Symmetry Payroll Forms is licensed by Symmetry. Which credentials you're issued depends on how you're delivering SPF.

We issue your credentials during onboarding. If you don't have what you need, reach out through the [Client Support Center](https://support.symmetry.com).

## The credentials

| Credential            | Who gets it        | What it's for                                                                  |
| --------------------- | ------------------ | ------------------------------------------------------------------------------ |
| API Key (or Hash)     | API clients        | Exchanged for a JWT access token on every session                              |
| Profile Key           | Hosted clients     | Identifies your account in Download Center, Settings Builder, and session URLs |
| Download Center login | On-premise clients | Retrieving the SPF application and release packages                            |
| Webservice API key    | On-premise clients | Authenticating to the Symmetry Location Service for address resolution         |

<Note>
  This page covers which credentials you're issued and what each one unlocks. For how to authenticate with them (JWT access tokens, OAuth 2.0 postbacks, and proxy basic authentication), see [Authentication in SPF](/spf/getting-started/authentication).
</Note>

## API

API clients are issued an **API Key**, sometimes called a Hash. You don't send it on SPF requests directly. You exchange it for a JWT access token, and that token authorizes every subsequent call.

## Hosted

Hosted clients are issued a **Profile Key** that identifies your account. It appears in the URLs you use to reach your account's resources:

```text theme={null}
https://spf.symmetry.com/spf/download-center?profile=[YourProfileKey]
https://spf.symmetry.com/spf/utility/settings-builder?profile=[YourProfileKey]
```

Your account's default settings (form modes, postback configuration, presentation options) are managed by Symmetry through the [Admin Panel](/spf/hosted/admin-panel). Most can be overridden per session in your SPF Registration without a support ticket.

## On-Premise

On-premise clients need two things.

**Download Center credentials** to retrieve `spf.war` and the `SPF_HOME` package, and to pull each subsequent release. Because you control your own deployment schedule, staying current with releases is how you stay current with the forms. See [Updating Symmetry Payroll Forms](/spf/on-premise/updating).

**A webservice API key** for the Symmetry Location Service, set as `config.webservice.apiKey` in your `settings.json`. Without it, SPF can't normalize addresses or resolve them to jurisdictions.

## The Symmetry Location Service

Address normalization, geocoding, and jurisdiction matching are provided by the Symmetry Location Service, which underpins form determination for U.S. addresses.

SLS usage may carry its own license fee depending on your agreement. Talk to your Symmetry Account Executive about how it applies to you. Canadian addresses don't currently go through SLS.

See [Symmetry Location Service](/spf/on-premise/symmetry-location-service).

## Related

<CardGroup cols={2}>
  <Card title="Authentication in SPF" icon="lock" href="/spf/getting-started/authentication">
    JWT, OAuth 2.0, and basic authentication configuration.
  </Card>

  <Card title="Implementation types" icon="scale-balanced" href="/spf/overview/implementation-types">
    Which set of credentials applies to you.
  </Card>
</CardGroup>