SES.HOSPEDAJES Credentials: Lessor Code and SOAP

A first day with compliance software gets eaten by one thing. The tool asks for a code, you open the Spanish Ministry of the Interior’s portal to go and find it, and no form anywhere carries that name. Some of these pieces are applied for, some are assigned to you automatically, and some are handed to you without your asking, and nothing explains them to you in that order.

Until they are all in place, any compliance software (including ours) has no way to connect. It is not a configuration problem: there is simply no door to go through yet.

And the door is not optional. Royal Decree 933/2021 closes its Article 6 by requiring the communications to travel electronically, with a single exception:

“The communications provided for in this article shall be made by electronic procedures. Excepted are the obliged parties that carry out lodging activities on a non-professional basis, who may make them by non-electronic means, through the procedure to be determined.”

If you operate accommodation professionally you are not in that exception. Your channel is the electronic one, and the electronic channel opens with credentials.

What each SES.HOSPEDAJES credential is and what it does

Registration does not hand you one credential: it hands you two sets at once. The procedure’s own page on the Ministry’s Sede Electrónica says so.

“The form must be filled in and the procedure completed by means of digital signature and registration. Once the registration is completed, both the credentials for accessing the application and those that allow the communication to be submitted through the automatic procedure via a Web Service are provided.”

One set is for logging in to the application in a browser. The other is for your software to submit guest reports without anyone logging in anywhere. In the registrations we handle, the submission username is the portal one with the _WS suffix, and it carries its own password.

Alongside those two sets, registration produces two codes that say who you are and what you operate. With the submission password, they are the three pieces you end up pasting into your software.

Lessor code: assigned by the registration, never requested

The unique identifier of the individual or legal entity that operates the accommodation. If you’re a sole trader with several apartments, you have a single lessor code. If you operate through a company, the company has one.

This code ties all your submissions to your legal ownership. There is no separate form to request it: SES.HOSPEDAJES assigns it automatically when you complete and sign the lessor registration³. To look it up later, the route is the portal’s “Mis datos registrados” column and its “Consulta y modificación de mis datos” entry, which is the procedure the Guía visual calls “Consultar código de arrendador/a”⁴.

Establishment code: one for each property

The identifier of each physical property operating as an accommodation. A hotel with 40 rooms has a single establishment code. A manager with 12 apartments has 12 establishment codes, all linked to the same lessor code.

Web-service (SOAP) username and password

The technical credentials your software uses to authenticate against the SES.HOSPEDAJES SOAP endpoint. Without them, no submission is possible.

The web-service username is not a name you choose. If the one you have put into your software doesn’t end in _WS, you have almost certainly copied the web-access one.

Prerequisites for registering with SES.HOSPEDAJES

Before starting, make sure you have:

• A valid FNMT digital certificate or electronic DNI belonging to the individual or entity acting as owner, or a Cl@ve account, which is a separate identification system and works just as well.
• The Autofirma client installed: the Sede requires you to sign the application with it, in any of the browsers it supports⁵.
• Tax identification details: NIF or CIF as applicable.
• Tourism license or registration number for each property. Requirements vary by autonomous community.
• Full postal address for each establishment, with cadastral reference if available.
• Accommodation type according to the Ministry’s classification (hotel, tourist apartment, rural house, etc.).
• Declared capacity: number of rooms or apartments and beds.

Having this ready saves you from abandoning the form halfway through.

SES.HOSPEDAJES digital certificate setup for foreign hosts

If the holder does not live in Spain, the certificate is the hard part, because the FNMT requires accrediting your identity in person. That can be done at a registration office in Spain (Hacienda offices and many town halls qualify) or, from abroad, through the Spanish Consular Offices⁶. Ask yours which documentation it wants before you plan a trip around it.

The usual alternative is to delegate to a Spanish gestor or administrative agent holding a representative certificate, who files on your company’s behalf. A third route does not exist. Registration goes through Cl@ve’s identification screen, which offers exactly three options: “Cl@ve Móvil” (which includes Cl@ve PIN), “DNIe / Certificado electrónico” and “Cl@ve permanente”³. A foreign passport is none of the three, so on its own it will not get you in.

Step 1: Register as a lessor

Registration is done on the Ministry of the Interior’s Sede Electrónica (hospedajes.ses.mir.es) and closes by signing and registering the application digitally². Cl@ve gets you in; the signature is made on your own computer with your certificate, through the Autofirma client⁵. What does not exist is a username and password you create yourself.

1. Open “Acceso al registro de establecimientos y entidades”, the first of the three lodging procedures the Sede publishes.
2. Identify yourself on the Cl@ve screen with one of its three options.
3. In “Registro de entidades y establecimientos”, click “Registro de entidades”.
4. On the “Formulario de registro”, tick “Actuar en nombre propio” if you are registering the entity in your own name, or “Actuar como representante de otra persona” if you are filing for someone else. Click “Continuar”.
5. Work through the form’s five steps: type of registration, entity details, establishment details, review and sign, finish³.
6. Sign and register the application. If it goes through, the system answers “Registro creado” and assigns you a lessor code linked to your certificate.

Save that code. It is one of the three things that travel with every submission, and your software will ask for it.

Step 2: Register each establishment

The registration form already includes an establishment-details step, so the properties you have that day go in there. Any that come later are added one by one from the portal⁴:

1. In “Registro de entidades y establecimientos”, click “Registro de establecimientos”.
2. On the “Formulario de registro de establecimientos”, pick the entity from the “Seleccione una entidad” dropdown.
3. Fill in the establishment’s details. The mandatory ones are marked with an asterisk:
   • Commercial name and type (hotel, hostel, guesthouse, tourist apartment, tourist use dwelling, campground, rural house, youth hostel, etc.).
   • Tourism registration number issued by the autonomous community.
   • Full address: street, number, floor if applicable, postal code, municipality and province.
   • Capacity: number of accommodation units and maximum beds.
   • Whether the establishment has an internet connection, plus email, phone and website.
4. Click “Añadir a la lista”. The establishment appears in the table at the bottom of the form.
5. Repeat as many times as you have establishments, then finish the process.

The system assigns an establishment code to each property⁴. If you have 10 apartments, you end up with 10 different codes, all hanging off the same lessor code.

Step 3: Where the web-service credentials come from

This is where the registrations we walk through get stuck, hunting for a form that does not exist. The web-service credentials are not requested separately: the Ministry hands them over when you complete the registration, at the same time as the ones for accessing the application². If you have finished the registration, you already have them.

What the portal does hold is a place to look them up and maintain them. Inside “Registro de entidades y establecimientos”, the last of the four columns is called Servicio de comunicación and holds a single entry: “Gestión de mis credenciales de acceso al servicio web”⁷. That opens the “Usuario servicio web” screen: you pick the entity from the dropdown and the “Datos del usuario” block shows your submission user’s name and the date it was created.

That same screen carries a “Descarga de la documentación” block whose download link always serves the latest available version of the service specification, schemas and submission detail included, for anyone integrating on their own⁷. It is the only route: the Ministry does not publish that specification outside the portal.

The passwords are changed through two separate procedures, one per credential set, and the Guía visual gives each its own section⁸:

1. The portal login password (section 8). It is recovered from the “Acceso al Sistema de Hospedajes” screen through the “He olvidado la contraseña y deseo recordarla” link, which asks for the document number and the email you registered with.
2. The web-service password (section 9), the one your software uses. It is changed inside the portal, on the web-service user screen. If you have more than one registered entity, the process makes you pick which one you are changing it for.

None of this is requested by email or through a separate sign-up form.

The web-service password: 8 characters minimum, no accents

The portal imposes its own rule when you set it: at least 8 characters, with one uppercase letter, one lowercase letter and one number. If the change goes through, it answers “¡Contraseña cambiada!”⁸.

What the portal does not warn you about is that it also accepts quotes, accents and other special characters that then break authentication on the electronic channel. We have seen the whole pattern in our own submissions: the password is correct in the portal and every guest report still fails. Pick a long one made only of unaccented letters, numbers and hyphens.

These are the credentials you enter in your software. From there, every submission is authenticated against your account.

Step 4: Enter your SES.HOSPEDAJES credentials in your software

With the three elements in hand (lessor code, establishment codes, and credentials), you can configure your submission tool. In RegistroViajero the flow is:

1. Settings → Agency → SES Credentials: add a credential with its label, the username, the password and the lessor code. The system encrypts them with AES-256-GCM before storing them.
2. Accommodations → Edit: on each property, enter its establishment code and pick which credential it uses.
3. Test connection: before going live, run a check against the Ministry. RegistroViajero also verifies the credentials on its own and warns you if the Ministry stops accepting them.
4. From that point on, every validated record is sent automatically with no further intervention.

The step by step is in the SES credentials guide in our help center.

Common errors when registering with SES.HOSPEDAJES

”The certificate does not match the owner of the registration”

The digital certificate you use must belong to the same individual or entity listed as the owner. If the accommodation is held by a company and you authenticate with your personal certificate, the process is rejected.

Fix: use the company’s representative certificate or request a specific one. It is what we have found most often behind “the digital certificate doesn’t work on SES.HOSPEDAJES”.

”Tourism registration number not found”

Some regions take time to sync their tourism registry with the Ministry’s. If you just obtained your number and the system doesn’t recognise it, wait 48 to 72 hours or contact your region’s tourism authority to confirm your registration has been published.

”Duplicate establishment code”

This usually happens when you try to register the same accommodation twice with slight variations in the address. Check whether an entry already exists for that property before creating a new one.

Error 10107: invalid credentials

One of the most common codes. It means the Ministry rejects the trio that travels with every submission: username, password and lessor code. Any one of the three that doesn’t fit returns the same 10107, so checking the password alone is not enough. (If the lessor code doesn’t even exist as such in SES, the code you’ll see is 10103, not 10107. The difference and the rest of the codes are in the error-codes guide.)

Check, in order:

1. That the username ends in _WS. If it doesn’t, you have copied the portal login one, which is a different username.
2. That you’re using the web-service password, not the portal one: they are two separate passwords, each with its own change procedure.
3. That there are no stray spaces when copying the password.
4. That the lessor code in the software is exactly the one SES assigned.
5. That you didn’t change the web-service password in the portal and forget to update it in the software.
6. That the password contains no quotes, accents or other special characters: the portal accepts them when you set it, but they can break submission authentication.

”SES.HOSPEDAJES won’t let me in” or HTTP 500 on login

Usual cause: a temporary issue with the portal or the certificate authentication service. If you wait a few minutes and retry, it usually clears. An expired certificate also returns a 500 with no detail.

If the 500 is constant, look at where you are logging in from. The Sede lists only three supported browsers, and requires the Autofirma client installed on all of them: Internet Explorer 9 or later and Edge, Chrome 4 or later, and Firefox 3.0 or later⁵. Safari and mobile browsers are not on that list, so try from a desktop machine before writing the procedure off as broken. For technical questions that survive all that, the Ministry publishes the address [email protected] in its FAQ document⁹.

Forgotten password: recovering it with your document number

No certificate is needed. The “Acceso al Sistema de Hospedajes” screen carries a “He olvidado la contraseña y deseo recordarla” link, and what it asks for is the document number and the email used at registration⁸.

Mind which of the two you are recovering. The portal one does not touch the web-service one: they are independent, and your software keeps submitting while you cannot log in. It does not work the same way round: if you change the web-service password and don’t update it in your software, the next submission fails with a 10107.

How long does it take to get SES.HOSPEDAJES credentials?

The Ministry publishes no processing times, so what follows is what we see when setting up client accounts, not an official figure:

• Lessor registration: immediate if the certificate is valid.
• Establishment registration: immediate for each property.
• Technical credentials: immediate for most profiles. In some cases we have seen manual validation take one to three business days.

It’s reasonable to have everything operational in less than a week from when you start, provided the regional documentation is in order.

Not registering with SES.HOSPEDAJES: fines of 601 to 30,000 euros

It is worth knowing what sits on the other side of this paperwork, because registration is not a formality that precedes the guest reports: not appearing in the register is a breach in itself. Spain’s Ministry of the Interior says so plainly in its FAQ, question 24: failure to be entered in the register of accommodation establishments and entities counts as a serious offence, punishable by a fine of 601 to 30,000 euros⁹.

That wide band is not applied all at once. Serious offences under Royal Decree 933/2021 are penalised through Ley Orgánica 4/2015 on public safety, whose article 33.2 splits the serious band into three degrees: a minimum of 601 to 10,400 euros, a medium of 10,401 to 20,200 and a maximum of 20,201 to 30,000¹⁰. Our reading is that a first file, with no repeat offence and none of the aggravating circumstances listed in article 33.1, sits in that minimum degree; the 30,000 euros is the ceiling of the maximum degree, not the starting figure.

Two points that prevent nasty surprises:

• This is a different offence from failing to file the reports. You can have every establishment registered and still be penalised for not sending the data within the 24 hours of article 8, and the other way round. That second regime is set out in the penalties under Royal Decree 933/2021.
• Registration is free and usually immediate. Between the cost of the paperwork and the floor of the fine there are six hundred euros of difference, so the arithmetic leaves little room for debate.

Catalonia and the Basque Country: outside SES.HOSPEDAJES

These two regions run their own systems, so none of the above applies:

• Catalonia: submissions go to the Mossos d’Esquadra through the Generalitat’s system. Registration and credentials are handled by the relevant regional department, not by the Ministry.
• Basque Country: submissions go to the Ertzaintza through the Basque Government’s system, with the same split.

The detail of each system is in guest registration in Catalonia and the Basque Country. At RegistroViajero we’re working to integrate these systems as their technical specifications become available.

Frequently asked questions

Which credentials do I need to submit guest reports to SES.HOSPEDAJES? To submit guest reports to SES.HOSPEDAJES you need three things: the lessor code, which identifies the holder; one establishment code per property; and the web-service username and password, which are what you enter in your software. The credentials you use to log in to the web portal are not valid for automatic submission.

Where do I request the lessor code? The lessor code is not requested on any form: SES.HOSPEDAJES assigns it automatically when you complete the lessor registration, and you can look it up afterwards in the portal itself, under “Consulta y modificación de mis datos”.

Do the web-service credentials have to be requested separately? The web-service credentials do not have to be requested separately. When you complete the registration, the Ministry issues both the application access credentials and the ones for automatic submission through the web service. What you do from the portal is change each password, and those are two separate procedures.

Why does my software fail authentication when I can log in to the portal fine? Your software fails authentication while you log in to the portal fine because these are two different credential sets: web access runs on Cl@ve or a certificate (or the portal username and password), and automatic submission runs on the web-service username, the one ending in _WS, with its own password.

How long does it take to get SES.HOSPEDAJES credentials? The time to get SES.HOSPEDAJES credentials is usually hours rather than days. The Ministry publishes no processing times, but in the registrations we handle the lessor registration and each establishment registration are immediate when the certificate is valid. Only on some profiles have we seen manual validation take one to three business days.

What happens if I never register my property with SES.HOSPEDAJES? If you never register your property with SES.HOSPEDAJES, the failure to appear in the register of accommodation establishments is in itself a serious offence, fined 601 to 30,000 euros according to the Spanish Ministry of the Interior’s FAQ. A first file with no aggravating circumstances sits in the minimum degree of Ley Orgánica 4/2015, 601 to 10,400 euros. It is a separate offence from failing to file the guest reports on time.

What to do once you have the credentials

With the three pieces in place, the work left is no longer administrative. It is connecting guest check-in to the submission itself, so no guest report depends on someone remembering to log in to the portal.

Where to go next:

• The complete SES.HOSPEDAJES guide covers the rest of the flow: access, submission, and what to do when something fails.
• Read what RD 933/2021 requires to see it in context.
• Review the applicable penalties for non-compliance.
• See how RegistroViajero works.

The exact menu names in the SES.HOSPEDAJES portal may change between Ministry updates. This guide reflects the general flow at the time of publication.