SoloID

SoloID is an identity provider that offers a range of authenticators to ease the authentication process. It is an identity provider capable of providing an NSIS substantial level of authentication comparable to the most common MitID level of authentication.

It can easily be used as a drop in replacement for MitID for many use cases. Compared to MitID passkeys provide a significantly faster authentication experience with a higher success rate. Further it provides an option to authenticate users even if MitID experiences downtime

The flow can be tested here. The MitID user must be present in the MitID pp environment. Custom theming is available and is used in this test flow.

Supported OIDC parameters

Request parameter Description
idp_values soloid

The idp_values parameter is optional and soloid can alternatively be configured as an identity provider in the broker administration site

Supported identity provider parameters (idp_params -> soloid)

Identity Provider parameters (soloid)

Description

credentials

This is a list of credentials that will be shown to the user to use for authentication

Type: List of

  • passkey
  • mitid
  • soloidauthenticator
Default: ["passkey", "mitid"]

Example JSON for identity provider parameters

{
  "soloid": {
    "credentials": ["passkey", "mitid"],
  }
}

Supported scope values

Scope

Description

soloid

List of claims:

  • soloid.mitid_uuid

ID token claim values

Claim

Description

loa

Level of Assurance

One of

  • https://data.gov.dk/concept/core/nsis/Low
  • https://data.gov.dk/concept/core/nsis/Substantial
  • https://data.gov.dk/concept/core/nsis/High

amr

Authentication Method method used by the user

One of

  • passkey
  • mitid
  • soloidauthenticator

Userinfo endpoint claim values for soloid scope

Claim

Description

soloid.mitid_uuid

The unique MitID identifier of the subject.

SoloID Authenticator

SoloID authenticator is a multi-factor authentication app that can be used in SoloID. It provides an option for authentication for use cases and browsers where passkey and MitID might not be applicable. It is mainly intended for enterprise usage by employees.