Signicat provides a service called “demo”, which is a service intended for demo and testing purposes while you await your own customer-specific service. Once you have signed a contract with Signicat, you and your company will get your own service which should be used for all testing purposes.
For more help and guidelines, please visit Get started with authentication or Get started with signatures to learn more about how services are utilized.
Servicename: demo
WS Password: Bond007
Test users: See separate page for each ID method.
Authentication methods
|
Country
|
ID name
|
Method name
|
|---|---|---|
| Norway | Norwegian BankID | nbid |
| Norway | Norwegian BankID on mobile | nbid-mobil |
| Norway | Norwegian BankID with Bisnode lookup | nbid-bisnode |
| Norway | Norwegian BankID on mobile with Bisnode lookup | nbid-mobil-bisnode |
| Norway | Norwegian BankID without national identity number | nbid-nossn |
| Norway | Norwegian BankID on mobile without national identity number | nbid-mobil-nossn |
| Norway | Norwegian xID | nbxid-ssn |
| Norway | Norwegian xID without national identity number | nbxid-nossn |
| Norway | Buypass | buypass |
| Norway | Commfides | commfides |
| Sweden | Swedish BankID | sbid |
| Sweden | Swedish BankID with QR code scan | sbid-qr |
| Sweden | Telia e-leg | telia |
| Sweden | Freja eID Basic | freja-basic |
| Sweden | Freja eID+ | freja-plus |
| Denmark | NemID key card | nemid |
| Denmark | NemID on file | nemid-codefile |
| Finland | Tupas | ftn |
| Finland | FINeID | fineid |
| Finland | Mobiilivarmenne | mobiilivarmenne |
| Estonia | EstEID | esteid |
| Estonia | EstEID Mobile | esteid-mobil |
| Baltics | Smart-ID | smartid |
| Belgium | itsme Register | itsme-register |
| Belgium | itsme Login | itsme-login |
| Netherlands | iDIN | idin |
| Spain | DNI electrónico | dnie |
| All | Facebook, Google, Live or LinkedIn | social |
| All | SMS/e-mail | scid-sms |
Please see this page for SAML Response examples.
Supported URL parameters are listed at the end of this page.
Signature methods
|
Country
|
ID name
|
Method name
|
Result output format
|
Text
|
PDF
|
PAdES*
|
Other
|
|---|---|---|---|---|---|---|---|
| Norway | Norwegian BankID | nbid-sign | LTV-SDO | Yes | Yes | No | |
| Norway | Norwegian BankID mobile | nbid-mobil-sign | SEID-SDO (text/plain) LTV-SDO (pdf) |
Yes | Yes | Yes | Note that PDF and PAdES require Signed Statement. |
| Norway | Buypass | buypass-sign | PKCS7 | Yes | Yes | No | |
| Norway | Buypass | buypass-ltv-sign | LTV-SDO | Yes | Yes | Yes | |
| Norway | Commfides | commfides-sign | LTV-SDO | Yes | Yes | Yes | |
| Sweden | Swedish BankID | sbid-sign | LTV-SDO | Yes | Yes | Yes | |
| Sweden | Swedish BankID with QR code scan | sbid-qr-sign | LTV-SDO | Yes | Yes | Yes | |
| Sweden | Telia e-leg | telia-sign | PKCS7 | Yes | Yes | No | |
| Denmark | NemID keycard | nemid-sign | LTV-SDO | Yes | Yes | Yes | |
| Denmark | NemID on file | nemid-codefile-sign | LTV-SDO | Yes | Yes | Yes | |
| Estonia | EstEID | esteid-sign | bDoc | No | Yes | No |
*PAdES requires Packaging service (packaging method “pades” and “ltvsdo-validator” as validation method). PAdES does not support text/plain.
Authentication-based signature methods
|
Country
|
ID name
|
Method name
|
Result output format
|
Text
|
PDF
|
PAdES*
|
|---|---|---|---|---|---|---|
| Norway | Norwegian BankID | nbid | LTV-SDO | No | No | No |
| Norway | Norwegian BankID on mobile | nbid-mobil | LTV-SDO | No | No | No |
| Norway | Buypass | buypass | LTV-SDO | Yes | Yes | Yes |
| Norway | Commfides | commfides | LTV-SDO | Yes | Yes | Yes |
| Sweden | Swedish BankID | sbid | LTV-SDO | No | No | No |
| Sweden | Swedish BankID with QR code scan | sbid-qr | LTV-SDO | No | No | No |
| Sweden | Telia e-leg | telia | LTV-SDO | Yes | Yes | Yes |
| Sweden | Freja eID Basic | freja-basic | LTV-SDO | Yes | Yes | Yes |
| Sweden | Freja eID+ | freja-plus | LTV-SDO | Yes | Yes | Yes |
| Denmark | NemID keycard | nemid | LTV-SDO | Yes | Yes | Yes |
| Denmark | NemID on file | nemid-codefile | LTV-SDO | Yes | Yes | Yes |
| Finland | Tupas | ftn-sign | LTV-SDO | Yes | Yes | Yes |
| Finland | FINeID | fineid | LTV-SDO | Yes | Yes | Yes |
| Finland | Mobiilivarmenne | mobiilivarmenne | LTV-SDO | Yes | Yes | Yes |
| Estonia | EstEID | esteid | LTV-SDO | Yes | Yes | Yes |
| Estonia | EstEID Mobile | esteid-mobil | LTV-SDO | Yes | Yes | Yes |
| Belgium | itsme | itsme-approval | LTV-SDO | Yes | Yes | Yes |
| Netherlands | iDIN | idin | LTV-SDO | Yes | Yes | Yes |
| Spain | DNI electrónico | dnie | LTV-SDO | Yes | Yes | Yes |
| All | Facebook, Google, Live or LinkedIn | social | LTV-SDO | Yes | Yes | Yes |
| All | SMS/e-mail | scid-sms | LTV-SDO | Yes | Yes | Yes |
*PAdES requires Packaging service (packaging method “pades” and “ltvsdo-validator” as validation method). PAdES does not support text.
Assure
|
Country
|
Description
|
Method name
|
Seal
|
Manual approval
|
Request form
|
|---|---|---|---|---|---|
| Global* | EstablishID with passport | scid-establishid-passport-seal | Yes | Yes | Yes |
| Global* | ProofID with passport | scid-proofid-passport-seal | Yes | Yes | No |
| Global* | EstablishID with selfie plus passport | scid-establishid-selfiepluspassport-seal | Yes | Yes | Yes |
| Global* | ProofID with selfie plus passport | scid-proofid-selfiepluspassport-seal | Yes | Yes | No |
*Countries that support passport: Norway, Sweden, Denmark, and Finland (support for more countries will be added in the future).
Portals
Authentication portals might be used when the user has to choose between two or more methods.
|
Name
|
Description
|
|---|---|
| auth-portal | Lists all authentication methods |
Graphical profiles
|
Profile
|
Description
|
|---|---|
| demo | Default layout |
| background | Default layout with background |
| iframe | Minimal styling |
Packaging method
|
Method name
|
Supported signatures
|
|---|---|
| pades-multi | Infinite |
Supported URL parameters
Using URL parameters might ease a process or disable one step for the end-user. Note that different ID methods may handle prefilling of national identification numbers differently.
|
ID method
|
Parameter
|
Input
|
Example****
|
|---|---|---|---|
| Norwegian BankID | prefilled.subject | national identification number | &prefilled.subject=05054512345 |
| Norwegian BankID on mobile | prefilled.subject | Mobile number:birth date | &prefilled.subject=11223344:050545 |
| Norwegian BankID on mobile (BankID version 2.0) * |
prefilled.subject
prefilled.phone |
national identification number
Mobile number |
&prefilled.subject=05054512345
&prefilled.phone=11223344 |
| Swedish BankID | prefilled.subject | national identification number | &prefilled.subject=194505051234 |
| Freja eID Basic | prefilled.subject | &prefilled.subject=carl@example.com | |
| Freja eID+ | prefilled.subject | national identification number | &prefilled.subject=194505051234 |
| NemID | prefilled.subject
prefilled.mode |
national identification number
Client mode Standard or limited |
&prefilled.subject=0505451234
&prefilled.mode=limited &prefilled.mode=standard |
| Tupas | prefilled.subject *** | national identification number | &prefilled.subject=210281-9988 |
| SMS-OTP | prefilled.subject | Mobile number | &prefilled.subject=+4711223344 |
| SMS-OTP/e-mail | prefilled.authType
prefilled.deviceId |
SMS/e-mail
Mobile number/e-mail |
&prefilled.authType=sms
&prefilled.deviceId=+4711223344 |
*) Also accepts the legacy format (mobile:birth date) for backwards compatibility.
**) Contact support@signicat.com to know which tags apply to your service.
***) Only available for response ID types 00, 05, 06, 07, and 09 (encrypted identifier).
****) Value needs to be URL encoded
OIDC considerations
We have set up a ‘demo-preprod’ client that should be used if you would like to use OpenID Connect as the authentication protocol. For this client, the scope “profile” is available for all ID methods. Other scopes may be available depending on the ID method used.
When calling the OIDC endpoint, you will need to submit the client secret for the “demo-preprod” client. You can download the demo JSON Web Key here.
The OIDC server will redirect the user to a redirect URI once the user has finished authenticating and authorizing the access for your client. The following redirect URIs are preconfigured and may be used:
https://localhost:8080/redirect, https://localhost:5000/redirect https://localhost/redirect, http://localhost/redirect
You may contact support@signicat.com to set up an additional redirect URI for use.
List of scope and claims available if supported by the ID method in question
| Scope | Claims |
|---|---|
| profile | website, zoneinfo, birthdate, gender; profile, preferred_username, given_name, middle_name, locale, picture, updated_at, name, nickname, family_name |
| signicat.national_id | signicat.national_id |
| signicat.certificate | signicat.certificate |
| address | address |
| email_verified, email | |
| phone | phone_number_verified, phone_number |
| signicat.certificate | signicat.certificate_bank, signicat.certificate_not_after, signicat.certificate_issuer_dn, signicat.certificate_not_before, signicat.certificate_dn |
| signicat.assure | assure.account_name, assure.assure_document_ref_id, assure.manual_approval_document_ref_id, assure.paper_evaluation_error, assure.paper_evaluation_result |
| signicat.paper | paper.issuedate, paper.expirydate, paper.document_number, paper.nationality, paper.document_type |