Initiating Interactive Strong Identification (suomi.fi-tunnistus)
Produce a URL leading to the interactive strong identification web page
The URL for interactive strong identification is generated by requesting it via the Management API. The request can use Management API Client credentials or any valid access token (no specific scope is required); you need to provide the user ID, a success redirect URI, and a failure redirect URI.
See the API documentation for
POST https://{your-id-server}/api/rest/v1/user/{userId}/strongidentification/interactive
for the full request/response reference.
The produced URL is only valid for a short time, so generate it immediately before forwarding the user to it — don't generate it ahead of time.
Deprecated method
In older server versions, the interactive identification URL was constructed by hand and required an access token. This method still exists but isn't recommended — use the API endpoint above instead.
Redirect the user to the produced URL
Have the user open the URL in their web browser.
Wait for the result
The identification process ends in either success or failure. On success, the user is redirected to the provided success redirect URL. On failure (including cancellation), the user is redirected to the failure redirect URL.
Failure redirect URI parameters
If the identification process doesn't finish successfully, these parameters may be added to the failure URI:
| Parameter | Value |
|---|---|
error | Error code. |
error_description | Short, human-readable explanation of the error, in English. |
Sequence diagram
suomi.fi strong identification + sign-in (Finnish)
Test credentials
The Digital and Population Data Services Agency (DVV) provides test credentials for suomi.fi identification and sign-in.
See also Strong Identification Explained for the broader concepts.