IduraDocumentation
  1. Verify
  2. Reference
  3. JWT payloads per eID type

Below you will find the structure and example content of ID tokens – JSON Web Tokens returned when signing in with each of the supported eID types.

The examples show only the user-specific fields. The actual issued JWTs also include additional technical OIDC-conformant fields used for validation and session management.

Sweden

BankID

{
"identityscheme": "sebankid",
Overall eID used to authenticate
"nameidentifier": "1373c272b61a4cb588b29c44883fe62f",
Legacy format of 'sub'
"sub": "{1373c272-b61a-4cb5-88b2-9c44883fe62f}",
Persistent pseudonym. Uniquely identifies an eID user (per Idura Verify tenant)
"ssn": "196802020575",
Social security number
"name": "Terne Paulsen",
"given_name": "Terne",
An OpenID Connect standard claim
"family_name": "Paulsen",
An OpenID Connect standard claim
"ipaddress": "77.241.128.160",
"country": "SE"
}

The ssn field is the social security number.

Norway

BankID

{
"identityscheme": "nobankid-oidc",
Overall eID used to authenticate
"nameidentifier": "ee9b1bb905a6458e9f3b9d068f1a3765",
Legacy format of 'sub'
"sub": "{ee9b1bb9-05a6-458e-9f3b-9d068f1a3765}",
Persistent pseudonym. Uniquely identifies an eID user (per Idura Verify tenant)
"uniqueuserid": "9578-6000-4-351726",
Identifies the legal person corresponding to the login (just like the socialno does, but is not considered to be sensitive)
"certissuer": "CN=BankID - TestBank1 - Bank CA 3,OU=123456789,O=TestBank1 AS,C=NO;OrginatorId=9980;OriginatorName=BINAS;OriginatorId=9980",
"certsubject": "CN=Larsen\\, Mikkel,O=TestBank1 AS,C=NO,SERIALNUMBER=9578-6000-4-351726",
"birthdate": "1946-03-27",
"socialno": "27034698436",
Social security number
"family_name": "Larsen",
An OpenID Connect standard claim
"given_name": "Mikkel",
An OpenID Connect standard claim
"name": "Mikkel Larsen",
"country": "NO"
}

The socialno field is the social security number. The uniqueUserId identifies the legal person corresponding to the login, and is not considered sensitive.

BankID Biometric

{
"identityscheme": "nobankid-oidc",
Overall eID used to authenticate
"authenticationtype": "urn:grn:authn:no:bankid:substantial",
acr_values used to authenticate
"nameidentifier": "cde37629c67b4318988ca0b378931e7d",
Legacy format of 'sub'
"sub": "{cde37629-c67b-4318-988c-a0b378931e7d}",
Persistent pseudonym. Uniquely identifies an eID user (per Idura Verify tenant)
"uniqueuserid": "9578-6000-4-476957",
Identifies the legal person corresponding to the login (just like the socialno does, but is not considered to be sensitive)
"certissuer": "CN=BankID - TestBank1 - Bank CA 3,OU=123456789,O=TestBank1 AS,C=NO;OrginatorId=9980;OriginatorName=BINAS;OriginatorId=9980",
"birthdate": "1941-08-16",
"dateofbirth": "1941-08-16",
"emailaddress": "mikkel@idura.com",
"email": "mikkel@idura.com",
"mobilephone": "90724328",
"phone_number": "90724328",
"socialno": "16084138758",
Social security number
"family_name": "Larsen",
An OpenID Connect standard claim
"surname": "Larsen",
"given_name": "Mikkel",
An OpenID Connect standard claim
"givenname": "Mikkel",
"name": "Mikkel Larsen",
"country": "NO"
}

The socialno field is the social security number.

Vipps MobilePay

{
"identityscheme": "novippslogin",
Overall eID used to authenticate
"nameidentifier": "75dca5991ad74a0981c092d424b82fbc",
Legacy format of 'sub'
"sub": "{75dca599-1ad7-4a09-81c0-92d424b82fbc}",
Persistent pseudonym. Uniquely identifies an eID user (per Idura Verify tenant)
"address": {
"street_address": "BOKS 6300, ETTERSTAD",
"postal_code": "0603",
"region": "OSLO",
"country": "NO",
"formatted": "BOKS 6300, ETTERSTAD\n0603\nOSLO\nNO"
},
An OpenID Connect standard address claim
"birthdate": "1955-09-82",
"gender": "male",
"emailaddress": "mikkel@idura.com",
"mobilephone": "4748059940",
"socialno": "10098235846",
Social security number
"family_name": "Larsen",
An OpenID Connect standard claim
"given_name": "Mikkel",
An OpenID Connect standard claim
"name": "Mikkel Larsen",
"country": "NO"
}

The socialno field is the social security number.

Denmark

MitID for citizens

{
"identityscheme": "dkmitid",
Overall eID used to authenticate
"nameidentifier": "0f9960a0d28d4353a3e2ea07f8ffa185",
Legacy format of 'sub'
"sub": "{0f9960a0-d28d-4353-a3e2-ea07f8ffa185}",
Persistent pseudonym. Uniquely identifies an eID user (per Idura Verify tenant)
"uuid": "74ffcd31-fbaf-4c33-bdac-169f25c1e416",
Danish MitID Person-ID (a persistent pseudonym which the DK authorities can use to identify the person). For citizens, it identifies the natural person. For employees, it identifies the legal person.
"cprNumberIdentifier": "2101270087",
Danish SSN (CPR Nummer)
"birthdate": "1927-01-21",
"age": "93",
"name": "Ditlev Von Testesen",
"country": "DK"
}

The cprNumberIdentifier field is the social security number.

MitID for citizens (with address lookup)

{
"identityscheme": "dkmitid",
Overall eID used to authenticate
"sub": "{3687039b-97c3-4c67-aeb6-4da85f7e5818}",
Persistent pseudonym. Uniquely identifies an eID user (per Idura Verify tenant)
"address": {
"formatted": "Paiman Petersen\nGrusgraven 1,3 tv\n3400 Hillerød\n(Lokalitet ukendt)\nDanmark",
"common_name": "Paiman Petersen",
"street_address": "Grusgraven 1,3 tv",
"postal_code": "3400",
"city": "Hillerød",
"locality": "(Lokalitet ukendt)",
"region": null,
"country": "Danmark"
},
An OpenID Connect standard address claim
"address_details": {
"road": "Grusgraven",
"road_code": "1732",
"municipality": "Lyngby-Taarbæk",
"municipality_code": "0173",
"house_number": "001",
"floor": "03",
"apartment_code": " tv"
},
"uuid": "8e6ab4ea-58b9-4130-a900-4366ba54eed9",
Danish MitID Person-ID (a persistent pseudonym which the DK authorities can use to identify the person). For citizens, it identifies the natural person. For employees, it identifies the legal person.
"cprNumberIdentifier": "2712589100",
Danish SSN (CPR Nummer)
"birthdate": "1958-12-27",
"age": "63",
"name": "Paiman Petersen",
"country": "DK"
}

The cprNumberIdentifier field is the social security number.

MitID for company signatories

{
"identityscheme": "dkmitid",
Overall eID used to authenticate
"nameidentifier": "0f9960a0d28d4353a3e2ea07f8ffa185",
Legacy format of 'sub'
"sub": "{0f9960a0-d28d-4353-a3e2-ea07f8ffa185}",
Persistent pseudonym. Uniquely identifies an eID user (per Idura Verify tenant)
"uuid": "74ffcd31-fbaf-4c33-bdac-169f25c1e416",
Danish MitID Person-ID (a persistent pseudonym which the DK authorities can use to identify the person). For citizens, it identifies the natural person. For employees, it identifies the legal person.
"cprNumberIdentifier": "2101270087",
Danish SSN (CPR Nummer)
"birthdate": "1927-01-21",
"age": "93",
"name": "Ditlev Von Testesen",
"cvrNumberIdentifier": "12345678",
Danish Business Registry Number (CVR Nummer)
"2.5.4.10": "Testorganisation nr. 12345678",
Company Name
"companySignatory": "true",
Company signatories can enter legal agreements on behalf of the company (DK readers: Ledelsesrepræsentant/tegningsberettiget)
"country": "DK"
}

MitID Erhverv (MitID for business)

{
"identityscheme": "dkmitid",
Overall eID used to authenticate
"nameidentifier": "159d89fca2db4300a52ab7865f7b1ff3",
Legacy format of 'sub'
"sub": "{159d89fc-a2db-4300-a52a-b7865f7b1ff3}",
Persistent pseudonym. Uniquely identifies an eID user (per Idura Verify tenant)
"uuid": "3c6d9757-1e70-438a-8dd3-5f84398c2e25",
Danish MitID Person-ID (a persistent pseudonym which the DK authorities can use to identify the person). For citizens, it identifies the natural person. For employees, it identifies the legal person.
"cvrNumberIdentifier": "12345678",
Danish Business Registry Number (CVR Nummer)
"2.5.4.10": "Testorganisation nr. 12345678",
Company Name
"name": "Firstname Lastname",
"employee": "true",
"country": "DK",
"productionUnit": "1092738120",
P-number: production unit number; denotes the addresses where the company has employees and/or carries out economic activity
"ridNumberIdentifier": "8636770830",
Danish NemID Employee-ID (a persistent pseudonym representing a legal person)
"seNumber": "98202298"
SE-number: administrative unit an employee belongs to (in case a company runs different activities under the same legal entity)
}

Finland

Finnish Trust Network - BankID

{
"identityscheme": "fitupas",
Overall eID used to authenticate
"nameidentifier": "788eb5abb2f84c0994a4d359f416f7ca",
Legacy format of 'sub'
"sub": "{788eb5ab-b2f8-4c09-94a4-d359f416f7ca}",
Persistent pseudonym. Uniquely identifies an eID user (per Idura Verify tenant)
"name": "_19cfbd642c4a82b08613b841caf0e153c5956c14",
Display name (when available for the user), or sub value received from FTN provider.
"country": "FI",
"given_name": "Väinö",
An OpenID Connect standard claim
"family_name": "Tunnistus",
An OpenID Connect standard claim
"birthdate": "1970-07-07",
"satu": "",
Finnish Unique Identification Number
"hetu": "070770-905D"
Finnish SSN
}

The hetu field is the personal identity code.

Finnish Trust Network - Mobillivarmenne

Same as BankID, except the satu property will have a value as well.