...
Several providers of electronic ID:s (Finansiell ID-Teknik, Freja eID, Secmaker) have similar API:s that customers can use to request authentication and signing operations. The GRP service wraps all these API:s into one, making the implementation of the different electronic ID:s much simpler for service providers. Consumers of the GRP API are called Relying Parties (RP:s).
Access info
| Info |
|---|
You will need a header called |
Auth/Sign
POST request to https://eid-connect.test.funktionstjanster.se/grp/v3/init - Used for starting a authentication or a signing to a provider.
...
serviceId | Yes | Relying parties identify themselves for the GRP API using the parameter "serviceId". This is a value assigned by the GRP service operator when signing up. | policy |
provider | Yes | The relying party selects eID provider using the argument "provider". Examples are "bankid", "freja" and "nias" | provider |
displayName | Yes | Name of the certificate to be used by the IdP | rpDisplayName |
requestType | No | Which type of request, "AUTH" for authentication and "SIGN" for signing. Defaults to AUTH if not specified. | |
transactionId | Yes | A client provided random string unique for the specific authentication or sign request. UUID format is recommended. The same value is returned in the response and this is used for tracing and logging purposes. | transactionId |
endUserInfo | Yes | IP-address of the end-user connected to the RP. | endUserInfo.IP_ADDR |
orgIdIssuer | No | Only used for Freja Organisation ID. Can be set to "ANY" to allow organisation IDs set by other Relying Parties. | |
callInitiator | Conditional | Indicate if the user or RP initiated the phone call. Possible values are "USER" and "RP". NB: This must be present if flowType is set to "PHONE", as this is a required parameter for a BankID phone auth/sign request. Otherwise it can be left out or with an empty value. | |
flowType | No | Specify what type of flow the request is for. Currently only supports one value "PHONE", used for BankID phone auth/sign. Defaults to regular BankID auth/sign if not specified. |
Example
|
Body:
Body info
The request body is not optional (that is, you need to send in a empty body at minimum {}), but can optionally use these elements:
...