Sign in with BankID

Community-contributed integration

BankID direct API access is restricted to licensed providers; integration goes through an OIDC broker. Configures as a generic OIDC provider. Reference: ory/integrates/government-identity/bankid.

BankID is the high-assurance electronic identity used in Sweden and Norway, providing eIDAS Substantial and High assurance. It is the de-facto authentication method for banking, public services, and healthcare in those markets.

Integration path

Use a broker that exposes BankID as standard OIDC, then configure it as a generic OIDC provider in Ory Identities.

Common brokers are Criipto, Signicat, and Nets.

Set up

1. Pick a broker, create an OIDC application, and enable Swedish or Norwegian BankID.
2. Set the Ory redirect URI as the broker's callback.
3. Configure the broker as a generic OIDC provider in Ory Identities with its issuer_url, client ID, and secret. Request the openid and profile scopes plus the broker-specific personal-number scope (for example ssn).
4. Use Jsonnet to map the personal number, name, and country.

Personal numbers are sensitive PII, so consider storing them in metadata_admin rather than metadata_public. BankID satisfies PSD2 SCA.

Resources

• Swedish BankID
• Norwegian BankID
• Criipto BankID
• Reference: ory/integrates/government-identity/bankid