Authenticate Using BankID
The BankID authentication screen launches the native BankID flow, which may be BankID on mobile (app-based) or BankID with one-time code depending on the user's setup. The app initiates a BankID session via the BankID provider client, handles the redirect or deep link callback after successful authentication, and establishes a secure session in the app. If the user's personnummer is returned by BankID, it is stored securely and optionally synced to the organization's member system.
User Story
Acceptance Criteria
- Given I have selected BankID on the auth method selector, When the BankID screen loads, Then the BankID provider client initiates an authentication session
- Given BankID authentication is in progress, When I complete the BankID flow in the BankID app or via one-time code, Then the deep link handler receives the callback and the app resumes the session
- Given BankID authentication succeeds, When the callback is processed, Then I am navigated to the role-based home screen without additional steps
- Given BankID authentication fails (user cancels or timeout), When the failure is received, Then I see a clear error message and can retry or choose a different method
- Given BankID authentication succeeds and returns my personnummer, When the identity is stored, Then it is saved securely using the secure storage adapter and linked to my user record
Business Value
BankID is the most widely adopted digital identity solution in Norway with over 4 million active users. For organizations managing sensitive volunteer data and social welfare programs, BankID provides legally recognized identity assurance. A secondary benefit is that BankID can return the user's personnummer, which the partner organizations currently lack for many members—resolving a longstanding data quality problem without manual effort.
Components
- BankID Authentication Screen ui
- BankID Authentication Service service
- BankID Provider Client infrastructure
- Deep Link / OAuth Redirect Handler infrastructure
- Authentication Session Manager service
- User Identity Repository data
- Auth Token Store data
- Secure Storage Adapter infrastructure
- Personnummer Confirmation Widget ui