Permalink:
Note: This document describes behaviour after onePortal™ version 2.7.2.
This flow is currently working for suomi.fi strong identification and strong authentication in Finland.
User is redirected to a web page on ID service, which redirects user to the strong identification service, where the user will sign in to their bank or otherwise prove their identity, and are then redirected back to the ID service and the service will redirect back to the original service.
Location: <baseUri>/openid/strongidentification
Example: https://europe.trivoreid.com/openid/strongidentification
Method: POST or GET
Parameters:
| Parameter | Value | Required |
|---|---|---|
| access_token | Current user's access token | Yes |
| successRedirectUri | URI where user agent is redirected after successful identification | Yes |
| failureRedirectUri | URI where user agent is redirected in failure cases | Yes |
Failure redirect URI parameters
In some failure cases additional parameters are added to the failureRedirectUri.
| Parameter | Value |
|---|---|
| error | Error code. Codes are listed below. |
| error_description | Short human readable explanation of error cause. |
| Error code | Meaning |
|---|---|
| not_available | Strong identification is not available for current user. |
| invalid_token | Access token is invalid or expired |
Sequence for suomi.fi strong identification + sign-in (Finnish)
Test credentials for suomi.fi identification + sign-in
The authotiry VRK provides test credentials at <https://palveluhallinta.suomi.fi/fi/tuki/artikkelit/5a82ef7ab03cdc41de664a2b>.