Page History

...

Many eID implementations across EU are offering OAuth 2.0 based integration options.

ID Austria (

...

Austria)

Test Environment - USP Service "E-ID Serviceprovider (Q)"

Step 1: Create "Service Provider" in USP.GV.AT

• Assign necessary "Verfahrensrechte"
  as described in https://eid.egiz.gv.at/anbindung/registrierung/registrierung-von-privaten-service-providern/
  
• Create your Service provider
  as described in https://eid.egiz.gv.at/anbindung/registrierung/registrierung-von-privaten-service-providern/

• Undergo the necessary accreditation steps (on test environment (Q) the accreditation will be completed within one hour automatically without "real" accredidation)
  On every status change, you will get an automatic email so that you know when you can proceed:
  

  From: sp-registrierung@brz.gv.at <sp-registrierung@brz.gv.at> To: <your USP registered email address> Subject: Status Ihres ServiceProvider "eSignAnyWhere Demo" wurde aktualisiert. Umgebung Q Sehr geehrte Damen und Herren, Der Status eines Ihrer Serviceprovider "<Service Provider name)" wurde geändert. Für mehr Informationen gehen Sie bitte auf <Link to USP administrative interface for the service provider>. Mit freundlichen Grüßen

  
  

• Don't forget to activate your service provider version.

As a result, you know the (self-defined) client-ID (must be an URL) and your client-secret.

Step 2: Configure eSignAnyWhere

Open Settings > Identity Providers and add a new OAuth2 provider. Enter the ID Austria credentials and configuration values as below.

https://eid2.oesterreich.gv.at

The URIs are documented in https://eid.egiz.gv.at/anbindung/direkte-anbindung/anbindung-oidc/ - if above's URIs don't work, check if there was an update on this page.

Add the following field mapping configurations:

After setting these values, the JWT and field mapping configuraiton should look similar to the following screenshot.

Image Added

Please note that the disposable certificate identification number will be updated with this configuration. If you want to override the identification number as it is shown in the configuration please also make sure to add a disposable certificate for the signer.

Image Added

Production Environment - USP Service "E-ID Serviceprovider"

Registration steps are similar to the one explained above for the test environment. Note that it requires for production use an acceditation and approval process triggered via USP, which may take some time.
Configuration is similar to the settings described above for "E-ID Serviceprovider (Q)" but with following changes (in short: "eid" instead of "eid2" in all URIs):

https://eid.oesterreich.gv.at

Early Adopter Environment

Step 1: Request early adopter access

Current process is published on ID Austria related technical documentation. In the past, it was a process that required to obtain client_secret via an email request.
We understood that registration for the "early adopter" environment is not available any more and interrested service providers should register for the "E-ID Serviceprovider (Q)" test environment via USP.GV.AT (see above).

Step 2: Configure eSignAnyWhere

Open Settings > Identity Providers and add a new OAuth2 provider. Enter the ID Austria credentials as below.

...

Please note that the disposable certificate identification number will be updated with this configuration. If you want to override the identification number as it is shown in the configuration please also make sure to add a disposable certificate for the signer.

Image Modified

Czech BankID (Czech Republic)

...

1. Login to eSignAnyWhere with a user that has administrative permissions on your Organization.
2. Open the Settings > Identity Providers page and add new OAuth Settings for User Authentication.
3. Note in case of ADFS that there are no forward slashes at the end. A mistake with the URL will result in the setup not working.

1. Click on Update to save the configuration
2. Click on the slider to enable the OAuth provider

...