# 1. Create organization identity

First, a new identity, with associated DID(s), needs to be created for the tuple (organization, environment).

# Using API
Perform the following REST API call. Note that `subject` is optional.

```http
POST <internal Nuts interface>/internal/vdr/v2/subject
Content-Type: application/json

{"subject": "fooorg-acc"}
```

# Using Nuts Admin
1. Log in to the **organization**’s Nuts Admin application.
Click on “Identities”.
2. Click on the plus sign on the right side.
3. Enter the subject: it consists of the tenant, dash, short form of the environment (e.g. `fooorg-acc`). This will act as key when interacting with the Nuts node’s APIs for this instance.
*Note: as deployments are isolated, theoretically, a static key could be used. But having the tenant and environment in the name reduces the possibility of leakage due to mixed-up environments.*
4. Click on “Create Identity”.