Integrator Relying Party Management API Client (DEPRECATED)


Table of contents

API Clients for Integrators

Other clients

Introduction to Integrator Relying Party Management

Identification of Relying Parties towards Freja eID services is achieved through SSL/TLS with client authentication. This, however, may present an issue for Relying Parties that act on behalf of their own customers, i.e. other organisations, with their own branding and the requirement that the end users, consuming their services, are aware of the organisation they are interacting with.

In order to avoid the complexities of having such Relying Parties manage multiple SSL/TLS certificates, one per customer organisation, Freja eID allows annotation of such Relying Parties as "Integrators". Integrator RPs are allowed to act on behalf of their customer organisations by utilizing a single SSL/TLS client certificate while passing the identity of the customer organisation as a parameter to API calls. Consequently, given the branding and presentation requirements towards end users within Freja eID, organisations on whose behalf Integrator RPs act on must be registered with Freja eID as ''Integrated RPs''. They cannot make use of Freja eID services directly but rather through the Integrator RP they are associated with.

For each Integrated RP, as well for the Integrator RP itself, Freja eID generates a unique identifier called relyingPartyId. The Integrator RP needs to pass this identifier as an additional POST parameter. This can be done in two ways:

  • Integrator RP can opt to build a separate client for each Integrated RP, in which case, the relyingPartyId should be passed in the constructor.
  • Integrator RP can build just one client and then pass the relyingPartyId as an additional parameter in each call to Freja eID services, whether they are acting as themselves or on behalf of an Integrated RP. This is the recommended way of passing the relyingPartyId.

For detailed information and examples of both implementations of Freja eID API Client libraries for Integrator RPs, please use the links provided below.