Asynchronous provisioning allows add-ons to perform out-of-band provisioning in a first-class way. It’s intended for add-on services that need extended time to set up and help make automated app setup and orchestration easier and less error-prone.

The customer will be billed as soon as the add-on starts provisioning. This means the time and cost of provisioning your service is accounted for in how much a customer pays. As such, you should make every effort to provision expediently so customers get value from your service as quickly as possible.

Add-ons that take longer than 12 hours to provision (or those your service fails to mark as “provisioned” via the API in that time period) will be...

Need to quickly catch up on this past quarter's announcements? Here are the top three topics to tune in on:

The Platform API for Partners provides many official endpoints that allow you to introspect security settings, discover other customer instances of the same add-on, and much more. With the Platform API, add-ons have an OAuth client secret and a number of OAuth authorizations, one token per provisioned add-on; it is only used to authenticate requests to create the scoped tokens and not used to authenticate other requests to the Platform API.

Updated password requirements for the add-on manifest go into effect as of December 15, 2017. Add-on manifest password values are required...

The Platform API for Partners provides many official endpoints that the App Info API doesn’t support. These endpoints let you introspect security settings, discover other customer instances of the same add-on, and much more. Platform API for Partners endpoints are also more consistent and “better traveled.” Heroku uses these endpoints internally, and customers also use them directly.

With the Platform API, add-ons have an OAuth client secret and a number of OAuth authorizations, one token per provisioned add-on. The OAuth client secret is only used to authenticate requests to create the scoped tokens; it is not used to authenticate other requests to the Platform API.

All new add-ons that...

Need to quickly catch up on this past quarter's announcements? Here are the top three topics to tune in on:

Heroku has expanded regions availability for Private Spaces and introduced the general availability of the Dublin region on September 26, 2017. Heroku users are able to run apps in all of the following Private Spaces regions: Virginia, Oregon, Frankfurt, Tokyo, Sydney, and Dublin. Please verify that your add-on's manifest accurately reflect the supported Privates Spaces regions.

Heroku app webhooks for customers and add-on webhooks for partners are generally available. Partners are able to track many kinds of events relating to add-on resources on apps, domains, builds,...

Need to quickly catch up on this past quarter's announcements? Here are the top three topics to tune in on:

Heroku announced the general availability of continuous integration (CI) on May 18, 2017. This new feature creates copies of staging apps to run tests, then destroys the app and its add-ons. With Heroku CI, you will see an increase in the number of default ephemeral plan resources regularly provisioned on Heroku review and CI apps. Previously, these apps used the add-on plan configured for staging.

As developers adopt CI/CD workflows, temporary deployments are becoming increasingly common. When ephemeral apps and their associated add-ons are destroyed, these actions should not...

Need to quickly catch up on this past quarter's announcements? Here are the top three topics to tune in on:

The new add-ons canary service will attempt to provision and deprovision your add-on service on an app named 'addons-canary'. These daily tests will help us proactively detect any failed provisioning attempts and ensure customers can provision all add-on services. This effort will also help us identify issues earlier and notify you of provisioning issues.

Heroku Shield, a set of services included in Heroku Enterprise, is generally available and offers customers additional compliance features needed for building high-compliance applications. Heroku Shield includes Shield...