link

# OIDC response examples

This page contains OIDC response examples for some of the ID methods available for authentication. The examples show how to use the access token to return a JSON response containing the end-user's information.

The request should always look like this (replace ACCESS_TOKEN with your access token):

curl -XGET "https://preprod.signicat.com/oidc/userinfo" -H "Authorization: Bearer ACCESS_TOKEN"

The response examples for each ID method can be found in the corresponding sections below.

# FTN (Finnish bank eIDs)

Note

This example uses OP bank.

Scope: openid profile signicat.national_id ftn

{
    "signicat.certificate_bank": "FTN (OP)",
    "sub": "6uuw8LqnwP7Os5Kzl_CoFYldCpoKeXBf",
    "birthdate": "1970-07-07",
    "name": "Väinö Tunnistus",
    "signicat.national_id": "070770-905D",
    "given_name": "Väinö",
    "locale": "FI",
    "ftn.idpId": "fi-op",
    "family_name": "Tunnistus"
}

These are the most commonly used claims. For a full list of claims offered by FTN, see the FTN page.

# iDIN

Scope: openid profile address signicat.idin

{
    "consumer.bin": "NLTRIO370f0cb71dfde80e31b23cc34a3088b5a09fee9cec20e746c2030780a4704115",
    "sub": "Hz0fqvmPC0jlBR_hJc2oaJPageele_hJ",
    "consumer.postalcode": "8681LW",
    "zoneinfo": "Europe/Amsterdam",
    "idin.requestedserviceid": "21974",
    "birthdate": "19700217",
    "address": {
        "country": "NL",
        "locality": "Utrecht",
        "postal_code": "8681LW"
    },
    "consumer.initials": "C",
    "gender": "2",
    "bankid.deliveredserviceid": "21968",
    "consumer.dateofbirth": "19700217",
    "consumer.gender": "2",
    "consumer.partnerlastname": "Ruysch",
    "locale": "NL",
    "given_name": "C",
    "consumer.houseno": "92",
    "consumer.city": "Utrecht",
    "consumer.preferredlastname": "Stegenga-Ruysch",
    "consumer.street": "Zeijerveenweg",
    "name": "C Stegenga",
    "consumer.country": "NL",
    "family_name": "Stegenga",
    "consumer.legallastname": "Stegenga"
}

For a full list of the attributes that can be returned when using iDIN, refer to this section (opens new window) of the iDIN documentation.

# itsme

Scope: openid profile

{
    "sub": "TXuEna3XLCQXRjcLjaZ1aUptqitw50Ny",
    "birthdate": "1974-04-12",
    "email_verified": "false",
    "address": "place Sainte Gudule",
    "gender": "male",
    "name": "Debora Test",
    "given_name": "Debora",
    "family_name": "Test",
    "email": "test@signicat.be"
}

# MitID

Scope: openid profile signicat.national_id signicat.certificate mitid

{
    "mitid.fal": "HIGH",
    "sub": "aob2hJFd1CBD1OKB9Kq7MyGEl-j1qhIY",
    "mitid.has_cpr": "true",
    "mitid.psd2": "false",
    "birthdate": "1990-02-17",
    "mitid.transaction_id": "c83dbc36-8b40-4bc4-9522-ec6cbdebde4b",
    "mitid.aal": "LOW",
    "mitid.uuid": "121f8c3b-9084-4d6a-b058-65a399810f14",
    "mitid.ial_identity_assurance_level": "SUBSTANTIAL",
    "signicat.national_id": "1702901234",
    "given_name": "Abelone",
    "mitid.ial": "SUBSTANTIAL",
    "mitid.reference_text_body": " ",
    "mitid.age": "22",
    "mitid.identity_name": "Abelone Christensen",
    "mitid.loa": "LOW",
    "name": "Abelone Christensen",
    "mitid.nemid_pid_lookup_status": "no_pid_for_cpr",
    "family_name": "Christensen",
    "mitid.cpr": "1702901234",
    "mitid.cpr.source": "user"
}

# Mobiilivarmenne (via FTN)

Scope: openid profile signicat.national_id ftn

{
    "ftn.satu": "440397400",
    "sub": "t8SsCF9-gu6EhjjkqJMGlN0fR54hsaiB",
    "birthdate": "1990-02-17",
    "gender": "M",
    "name": "John Signicat",
    "phone_number_verified": "true",
    "phone_number": "+358123456789",
    "signicat.national_id": "170290-012X",
    "locale": "FI",
    "given_name": "John",
    "family_name": "Signicat"
}

# MobileID InApp

For response examples, see the documentation for MobileID InApp:

# NemID

Scope: openid profile signicat.national_id signicat.certificate

{
    "sub": "3ImeWNXgbORX6XpuFetvHaSNOxHQP46d",
    "name": "John Signicat",
    "signicat.national_id": "1702901234",
    "given_name": "John",
    "locale": "DK",
    "signicat.certificate_unique_id": "9208-2002-2-075164137924",
    "signicat.certificate_serialnumber": "9208-2002-2-075164137924",
    "family_name": "Signicat"
}

# Norwegian BankID

Scope: openid profile signicat.national_id signicat.certificate

{
    "sub": "6ofVBM_uxebykmPnAYo3ORHGGYhFXRae",
    "signicat.certificate_issuer_dn": "CN=BankID - TestBank1 - Bank CA 3,OU=123456789,O=TestBank1 AS,C=NO",
    "birthdate": "1990-02-17",
    "signicat.certificate_originator": "9980",
    "signicat.national_id": "1702901234",
    "locale": "NO",
    "given_name": "Anders Test",
    "signicat.certificate_serialnumber": "1075107",
    "signicat.certificate_dn": "CN=Karpedamsvik\\, Anders Test,O=TestBank1 AS,C=NO,SERIALNUMBER=9578-6000-4-361384",
    "signicat.certificate_policies": "2.16.578.1.16.1.12.1.1",
    "signicat.certificate_bank": "BINAS",
    "signicat.certificate_not_after": "2021-05-22",
    "signicat.certificate_not_before": "2019-05-22",
    "name": "Karpedamsvik, Anders Test",
    "family_name": "Karpedamsvik",
    "signicat.certificate_unique_id": "9578-6000-4-361384"
}

# Norwegian BankID on mobile

Scope: openid profile signicat.national_id signicat.certificate mobile

{
    "sub": "6ofVBM_uxebykmPnAYo3ORHGGYhFXRae",
    "signicat.certificate_issuer_dn": "CN=BankID - TestBank1 - Bank CA 3,OU=123456789,O=TestBank1 AS,C=NO",
    "birthdate": "1990-02-17",
    "signicat.certificate_originator": "9980",
    "phone_number_verified": "true",
    "signicat.national_id": "1702901234",
    "given_name": "Daga",
    "locale": "NO",
    "signicat.certificate_serialnumber": "1460362",
    "signicat.certificate_policies": "2.16.578.1.16.1.12.2.1",
    "signicat.certificate_dn": "CN=Krook\\, Daga,O=TestBank1 AS,C=NO,SERIALNUMBER=9578-6000-4-361384",
    "signicat.certificate_bank": "BINAS",
    "signicat.certificate_not_after": "2023-02-17",
    "signicat.certificate_not_before": "2021-02-17",
    "name": "Krook, Daga",
    "phone_number": "+4712345678",
    "signicat.certificate_unique_id": "9578-6000-4-361384",
    "family_name": "Krook"
}

# Personalausweis

Scope: openid profile signicat.npa

{
    "sub": "3y2LkVrH8PhJKS94XvkD8Or8Ccj_f-Um",
    "npa.document_type": "ID",
    "npa.date_of_birth": "Wed Aug 12 00:00:00 CEST 1964",
    "birthdate": "Wed Aug 12 00:00:00 CEST 1964",
    "npa.issuing_state": "D",
    "npa.date_of_expiry": "Fri Nov 30 00:00:00 CET 2029",
    "signicat.national_id": "6A11052B71F808C8686D837C0BC1EAEE570227A439B45D0041C6CD40042ABB82",
    "npa.family_name": "MUSTERMANN",
    "npa.place_of_residence": "D:null:51147:KÖLN:HEIDESTRASSE 17",
    "given_name": "ERIKA",
    "locale": "DE",
    "npa.birth_name": "GABLER",
    "npa.place_of_birth": "BERLIN",
    "name": "ERIKA MUSTERMANN",
    "npa.given_names": "ERIKA",
    "family_name": "MUSTERMANN",
    "npa.document_validity": "valid"
}

# Smart-ID

Scope: profile signicat.national_id

{
    "sub": "o3EfcxuN_0g6k_9rrlkGOHGJXX2c_t45",
    "birthdate": "1990-02-17",
    "name": "DEMO SMART-ID",
    "signicat.national_id": "10102170005",
    "locale": "ee",
    "given_name": "DEMO",
    "family_name": "SMART-ID"
}

# Swedish BankID

Scope: openid profile signicat.national_id signicat.certificate

{
    "sub": "DzOcNRYQIaa38nL6s7tfjxK6Ib8g63JH",
    "signicat.certificate_not_after": "2021-01-07T22:59:59.000Z",
    "signicat.certificate_issuer_dn": "C=SE,O=Testbank A AB (publ),SERIALNUMBER=111111111111,CN=Testbank A Customer CA3 v1 for BankID Test OCSP Signing",
    "signicat.certificate_not_before": "2019-01-07T23:00:00.000Z",
    "name": "Daga Krok",
    "signicat.national_id": "199002171234",
    "given_name": "Daga",
    "locale": "SV",
    "family_name": "Krok"
}
Last updated: 11/09/2023 12:25 UTC