SES.HOSPEDAJES Credentials: Lessor Code and SOAP

A first day with compliance software gets eaten by one thing: the tool asks for a code, you open the Spanish Ministry of the Interior’s portal to go and find it, and there is no form anywhere with that name on it. Some of these pieces are applied for, some are assigned to you automatically, and some are handed to you without your asking, and nothing explains them to you in that order.

Until they are all in place, any compliance software (including ours) has no way to connect. It is not a configuration problem: there is simply no door to go through yet.

Here’s what each one is, how to request it, and in what order, so you can start complying with Royal Decree 933/2021 without going in circles. It is the credentials detail within the complete SES.HOSPEDAJES guide, which covers the rest of the flow: access, submission, and what to do when something fails.

What each credential is and what it does

Worth clarifying the terms before getting into the paperwork. The three concepts get mixed up often, and they are not the same thing.

Lessor code (código de arrendador)

The unique identifier of the individual or legal entity that operates the accommodation. If you’re a sole trader with several apartments, you have a single lessor code. If you operate through a company, the company has one. This code ties all your submissions to your legal ownership. There is no separate form to request it: SES.HOSPEDAJES assigns it automatically when you complete and sign the lessor registration¹.

Establishment code

The identifier of each physical property operating as an accommodation. A hotel with 40 rooms has a single establishment code. A manager with 12 apartments has 12 establishment codes, all linked to the same lessor code.

Web-service (SOAP) username and password

The technical credentials your software uses to authenticate against the SES.HOSPEDAJES SOAP endpoint. Without them, no submission is possible.

The web-service username is not a name you choose: it is the portal username with the _WS suffix, and it carries its own password. If the username you have put into your software doesn’t end in _WS, you have almost certainly copied the web-access one.

Prerequisites for registering with SES.HOSPEDAJES

Before starting, make sure you have:

• A valid FNMT digital certificate or electronic DNI belonging to the individual or entity acting as owner, or a Cl@ve account, which is a separate identification system and works just as well.
• Tax identification details: NIF or CIF as applicable.
• Tourism license or registration number for each property. Requirements vary by autonomous community.
• Full postal address for each establishment, with cadastral reference if available.
• Accommodation type according to the Ministry’s classification (hotel, tourist apartment, rural house, etc.).
• Declared capacity: number of rooms or apartments and beds.

Having this ready saves you from abandoning the form halfway through.

SES.HOSPEDAJES digital certificate setup for foreign hosts

If the holder does not live in Spain, the certificate is the hard part, because the FNMT requires accrediting your identity in person. That can be done at a registration office in Spain (Hacienda offices and many town halls qualify) or, from abroad, through the Spanish Consular Offices². Ask yours which documentation it wants before you plan a trip around it.

The usual alternative is to delegate to a Spanish gestor or administrative agent holding a representative certificate, who files on your company’s behalf. What there is no third route for is identification itself. Registration goes through Cl@ve’s identification screen, which offers exactly three options: Cl@ve Móvil (which includes Cl@ve PIN), the electronic DNI or a digital certificate, and Cl@ve Permanente¹. A foreign passport is none of the three, so on its own it will not get you in.

Step 1: Register as a lessor

The initial registration is done through the SES.HOSPEDAJES web portal run by the Ministry of the Interior (hospedajes.ses.mir.es)³. The flow:

1. Log in to the portal. Registering takes a digital certificate or a Cl@ve account, and the procedure closes by signing and registering the application digitally³. Cl@ve gets you in; the final signature is made with a certificate, an electronic DNI or Cl@ve Firma. What does not exist is a username and password you create yourself.
2. Select “New lessor registration”.
3. Fill in the ownership details: name or company name, NIF/CIF, tax address, phone, contact email.
4. Accept the platform’s terms of use.
5. When you finish, the system assigns a lessor code linked to your certificate.

Save this code somewhere safe. You’ll need it for the next step and to configure your management software.

Step 2: Register each establishment

Once the lessor code is issued, you can register establishments one by one:

1. From the SES.HOSPEDAJES portal, go to “Establishments” → “New”.
2. Select the type (hotel, hostel, guesthouse, tourist apartment, tourist use dwelling, campground, rural house, youth hostel, etc.).
3. Enter:
   • Commercial name of the establishment.
   • Full address (street, number, floor if applicable, postal code, municipality, province).
   • Tourism registration number issued by the autonomous community.
   • Capacity: number of accommodation units and maximum beds.
   • Coordinates (optional but recommended).
4. Confirm the registration.

The system assigns an establishment code to each property⁴. If you have 10 apartments, you repeat the process 10 times and end up with 10 different codes.

Tip: name your establishments consistently

If you manage several properties, a clear naming convention (“Downtown Apartment 1A”, “Downtown Apartment 1B”…) that mirrors what you use in your management software saves confusion when assigning reservations.

Step 3: Where the web-service credentials come from

This is where almost everyone gets stuck hunting for a form that does not exist. The web-service credentials are not requested separately: when you complete the registration, the Ministry hands over both at once, the credentials for accessing the application and the ones that allow automatic submission through a web service³. If you have finished the registration, you already have them.

What the portal does hold is a place to look them up and maintain them. Inside “Registro de entidades y establecimientos”, the last of the four columns is called Servicio de comunicación and holds a single entry: “Gestión de mis credenciales de acceso al servicio web”⁵. In there you pick the entity (if you have more than one) and the portal shows you your submission user’s details.

From that same screen you download the service’s technical documentation, the schemas and the submission detail for anyone integrating on their own, through a link that always serves the latest available version⁵. It is the only route: the Ministry does not publish that specification on its sede.

The passwords are changed through two separate procedures, and the Guía visual gives each its own section⁶.

1. Changing the portal login password (section 8).
2. Changing the web-service password (section 9), which is the one your software uses. If you have more than one registered entity, the process makes you pick which one you are changing it for.

None of this is requested by email or through a separate sign-up form.

Tip: no special characters in the submission password

The portal accepts passwords with quotes, accents and other special characters, but some of those characters break authentication on the telematic channel: the password is “correct” and yet every submission fails. Pick a long password made only of unaccented letters, numbers and hyphens, and you save yourself a maddening diagnosis.

These are the credentials you enter in your software. From there, every submission is authenticated against your account.

Step 4: Enter your SES.HOSPEDAJES credentials in your software

With the three elements in hand (lessor code, establishment codes, and credentials), you can configure your submission tool. In RegistroViajero the flow is:

1. Settings → Agency → SES Credentials: add a credential with its label, the username, the password and the lessor code. The system encrypts them with AES-256-GCM before storing them.
2. Accommodations → Edit: on each property, enter its establishment code and pick which credential it uses.
3. Test connection: before going live, run a check against the Ministry. RegistroViajero also verifies the credentials on its own and warns you if the Ministry stops accepting them.
4. From that point on, every validated record is sent automatically with no further intervention.

The step by step is in the SES credentials guide in our help center.

Common errors during registration

”The certificate does not match the owner of the registration”

The digital certificate you use must belong to the same individual or entity listed as the owner. If the accommodation is held by a company and you authenticate with your personal certificate, the process is rejected.

Fix: use the company’s representative certificate or request a specific one. It is by far the most common cause behind “the digital certificate doesn’t work on SES.HOSPEDAJES”.

”Tourism registration number not found”

Some regions take time to sync their tourism registry with the Ministry’s. If you just obtained your number and the system doesn’t recognise it, wait 48–72 hours or contact your region’s tourism authority to confirm your registration has been published.

”Duplicate establishment code”

This usually happens when you try to register the same accommodation twice with slight variations in the address. Check whether an entry already exists for that property before creating a new one.

Error 10107: invalid credentials

One of the most common codes. It means the Ministry rejects the trio that travels with every submission: username, password and lessor code. Any one of the three that doesn’t fit returns the same 10107, so checking the password alone is not enough. (If the lessor code doesn’t even exist as such in SES, the code you’ll see is 10103, not 10107. The difference and the rest of the codes are in the error-codes guide.)

Check, in order:

1. That the username ends in _WS. If it doesn’t, you have copied the portal login one, which is a different username.
2. That you’re using the web-service password, not the portal one: they are two separate passwords, each with its own change procedure.
3. That there are no stray spaces when copying the password.
4. That the lessor code in the software is exactly the one SES assigned.
5. That you didn’t change the password in the portal and forget to update it in the software.
6. That the password contains no quotes, accents or other special characters: the portal accepts them when you set it, but they can break submission authentication. If that’s your case, change it to letters, numbers and hyphens only.

”SES.HOSPEDAJES won’t let me in” or HTTP 500 on login

Usual cause: a temporary issue with the portal or the certificate authentication service. If you wait a few minutes and retry, it usually clears. If it persists, try another browser or clear the cache. An expired certificate also returns a 500 with no detail.

Forgotten password: how to recover it

The portal has a “Change password” link that requires authenticating with the certificate. Once inside, you set a new one. Important: if you change the password in the portal, you have to update it in your software. If you don’t, the next submission fails with error 10107.

How long does it take to get SES.HOSPEDAJES credentials?

The Ministry publishes no processing times, so what follows is what we see when setting up client accounts, not an official figure:

• Lessor registration: immediate if the certificate is valid.
• Establishment registration: immediate for each property.
• Technical credentials: immediate for most profiles. In some cases we have seen manual validation take one to three business days.

It’s reasonable to have everything operational in less than a week from when you start, provided the regional documentation is in order.

What if I operate in Catalonia or the Basque Country?

These two regions have their own systems for guest reporting. We dig into both in Guest registration in Catalonia and the Basque Country:

• Catalonia: submissions go to the Mossos d’Esquadra through the Generalitat’s system. Registration and credentials are handled by the relevant regional department, not by the Ministry.
• Basque Country: submissions go to the Ertzaintza through the Basque Government’s system.

If you operate in these regions, check with the corresponding regional authority. At RegistroViajero we’re working to integrate these systems as their technical specifications become available.

Frequently asked questions

Which credentials do I need to submit guest reports to SES.HOSPEDAJES? To submit guest reports to SES.HOSPEDAJES you need three things: the lessor code, which identifies the holder; one establishment code per property; and the web-service username and password, which are what you enter in your software. The credentials you use to log in to the web portal are not valid for automatic submission.

Where do I request the lessor code? The lessor code is not requested on any form: SES.HOSPEDAJES assigns it automatically when you complete the lessor registration, and you can look it up afterwards in the portal itself.

Do the web-service credentials have to be requested separately? The web-service credentials do not have to be requested separately. When you complete the registration, the Ministry issues both the application access credentials and the ones for automatic submission through the web service. What you do from the portal is change each password, and those are two separate procedures.

Why does my software fail authentication when I can log in to the portal fine? Your software fails authentication while you log in to the portal fine because these are two different credential sets: web access runs on Cl@ve or a certificate (or the portal username and password), and automatic submission runs on the web-service username, the one ending in _WS, with its own password.

How long does it take to get SES.HOSPEDAJES credentials? The time to get SES.HOSPEDAJES credentials is usually hours rather than days: the Ministry publishes no processing times, but in the registrations we handle the lessor registration and each establishment registration are immediate when the certificate is valid, and only on some profiles have we seen manual validation take one to three business days.

What to do once you have the credentials

Once you have your credentials, what comes next is never sending guest reports by hand again. Automating the flow from guest check-in to submission to the Ministry is the difference between complying with peace of mind and living glued to a form.

If you want to get started:

• Read what RD 933/2021 requires to see it in context.
• Review the applicable penalties for non-compliance.
• See how RegistroViajero works.

The exact menu names in the SES.HOSPEDAJES portal may change between Ministry updates. This guide reflects the general flow at the time of publication.