For the complete documentation index, see llms.txt

Set up itsme®

Learn how to set up itsme® in the Signicat Dashboard and prepare your test environment. In this guide, you will enable itsme® for your account, configure test users and the mobile test app, and choose an authentication protocol to connect to your application.

Prerequisites

For the complete documentation index, see llms.txt

If you do not have an account already, then you need to sign up to the Signicat Dashboard for free and complete the initial preparations. To do this:

1. Sign up to the Signicat Dashboard and register your profile.
2. Ensure that you have created an organisation.
3. Create an account. To do this:
   1. Go to Signicat Dashboard > Organisation, then select + Add account.
   2. Enter an account name, choose the type of account that you want to create, then select Create.
4. Create a domain. To do this:
   1. Go to Signicat Dashboard > Settings > Domains, then select + Add domain.
   2. To create a standard domain, enter a domain name. Then, select Add domain.
   3. To create a custom domain, follow the instructions in the Custom domains documentation.

Account types

We recommend that you create a sandbox account to test our services before going live. Sandbox and production accounts must be set up separately.

Production accounts

To integrate with itsme® in production, you must sign contractual agreements with Signicat. To get started, follow the steps in the Go to production documentation.

Add itsme® to the Signicat Dashboard

For the complete documentation index, see llms.txt

1. In the Signicat Dashboard, navigate to Products > eID and Wallet Hub > eIDs.
2. Click + Add new in the top right.
3. Choose the eID from the list. Then, fill in any required configuration and click Add.
4. Now, review that the eID is available and displayed as Enabled in the eIDs page.

Signicat Support is here to help

If you need help configuring itsme®, you can contact us by creating a support ticket in the Signicat Dashboard.

Set up a test environment

Testing your setup in a sandbox environment allows you to simulate the end-user journey and verify that your application processes authentication responses correctly.

To test your itsme® integration, you need to complete the following steps:

1. Obtain an itsme® test user.
2. Install the E2E itsme® test application on a mobile device.

Below, you find more information about each item.

Note

Because itsme® requires multi-factor verification, you need to use the E2E itsme® app to test connections with itsme® .

1. Obtain a test user

To obtain an itsme® test user, contact one of our onboarding managers at onboarding@signicat.com.

Once you have received a test user, follow the instructions below to install the app.

2. Install the E2E app

You can download the itsme® E2E app for iOS and Android.

iOS

• App E2E - iOS

Android

To install the itsme® E2E app for Android, you need to do this:

1. Send a request to itsme® Onboarding team at onboarding@itsme-id.com and ask them to add you to the allow list. In your request, make sure to provide the email address of your Google Play Store account.
2. After you receive confirmation from the itsme® Onboarding team, you need to open the following link from your mobile device https://play.google.com/apps/testing/be.bmid.itsme.e2e and install the app.
3. Once you have installed the app, follow the itsme® step-by-step guide to configure it.

Set up a connection with a protocol

To establish a connection between Signicat and your application, you need to use an authentication protocol. Note that you only need to connect to Signicat eID and Wallet Hub servers. Signicat handles the connection with itsme® separately, therefore acting as a message broker between your application and itsme®.

Choose a protocol

For the complete documentation index, see llms.txt

Supported authentication protocols

Signicat supports the standard OpenID Connect (OIDC) and SAML 2.0 protocols. In addition, we offer our bespoke Signicat Authentication REST API.

The protocol you choose depends on your goals and preferences. The Authentication REST API provides flexibility and an easy setup. Otherwise, we recommend OIDC, since SAML 2.0 is much more complex to implement and usually requires a federation agent. OIDC is an industry standard with managed user sessions, unlike the Authentication REST API.

To learn more about these authentication protocols, see the Signicat eID and Wallet Hub documentation.

Set up the protocol

To set up an authentication protocol and integrate with itsme®, select the appropriate guide below:

OpenID Connect (OIDC)

Integrate with itsme® using OpenID Connect

Authentication API: Redirect flows

Integrate with itsme® using Signicat Authentication REST API

Authentication API: App2App mobile flows

Integrate with itsme® using headless flows for mobile applications

Authentication API: Backchannel Authentication (SABA)

Integrate with itsme® using Subject-Agnostic Backchannel Authentication (SABA)

For information on how to set up an integration with SAML 2.0, go to the eID and Wallet Hub - Set up SAML 2.0 documentation.

For general information about the different protocols, see the Signicat eID and Wallet Hub documentation.

Data and attributes

To learn more about attributes, scopes and claims supported by each authentication protocol, visit the Attributes reference page.

Go to production

To set up itsme® in a production account, follow the steps in the Go to production documentation.