Skip to main content

Authentication

Start IVR auth

The POST /v3/ivr endpoint is used to start an IVR auth.

POST /v3/ivr
Authorization: Basic ${ base64(accountId + ':' + secretKey) }
{
"providers": ["BANKID_SE", "VIPPS"],
"language": "ENGLISH",
"email": "E-mail",
"phone": "Phone number",
"callbackUrl": "https://...",
"refId": "12398698"
}
ParameterRequiredDescription
providersYesThe eID providers that should be available to the end user. Must be at least one and can either 'BANKID_SE', 'BANKID_NO', 'MITID', or 'FTN'
languageNoThe default user of the user interface. Can be one of 'ENGLISH', 'SWEDISH', 'NORWEGIAN', 'DANISH', 'FINNISH'
emailNoAn e-mail address to send a notification to
phoneNoA phone number to send a notification to
callbackUrlNoA URL where IDkollen will send a callback on successful or failed requests.
refIdNoReference ID which will be included in a Collect and in the callback.

Response:

IDkollen will respond with HTTP status 201 for successful request, or 4xx/5xx on errors. For more information about errors, please see the Errors section.

HTTP/2.0 201 Created
{
"id": "1668b9da-bff1-4dfc-ad48-60507b5a8d12",
"refId": "12398698",
"status": "PENDING",
"url": "https://..."
}
PropertyDescription
idAuthentication id, used to cancel or get the status of this IVR auth request.
refIdThe refId given in the request, if any.
urlThe URL where the end user can authenticate themselves.

Fetch result

The GET /v3/ivr/{{id}} endpoint is used to check the status of an IVR auth request.

NOTE: This endpoint is rate limited to one request per second.

GET /v3/ivr/{{id}}
Authorization: Basic ${ base64(accountId + ':' + secretKey) }

This endpoint will respond with a HTTP status of 404 if the IVR auth session has expired.

The status of an IVR auth can be either one of: PENDING, COMPLETED or FAILED.

Pending

{
"id": "1668b9da-bff1-4dfc-ad48-60507b5a8d12",
"refId": "12398698",
"status": "PENDING",
"url": "https://..."
}
ParameterDescription
refIdThe refId given in the request, if any.
urlThe URL where the end user can authenticate themselves.

Completed

{
"id": "1668b9da-bff1-4dfc-ad48-60507b5a8d12",
"refId": "12398698",
"status": "COMPLETED"
}
ParameterDescription
refIdThe refId given in the request, if any.

Failed

{
"id": "1668b9da-bff1-4dfc-ad48-60507b5a8d12",
"refId": "12398698",
"status": "FAILED",
"error": "INVALID_ID"
}
ParameterDescription
refIdThe refId given in the request, if any.
errorAn error code describing the reason for why the IVR auth failed.

The error may be one of the following values:

CodeDescription
AUTH_FAILEDA generic code for any kind of failure.
CANCELLEDThe IVR auth was cancelled either by the user or the partner.
INVALID_IDThe ID has expired or is otherwise invalid.
INTERNAL_ERRORAn internal error occurred causing the IVR auth to fail.
SESSION_TIMEOUTThe IVR auth expired or timed out.
UNSUPPORTED_CLIENTThe client used for the IVR auth is not supported.

New error codes may be added in the future without prior notice. The partner should therefore handle unknown error codes in their implementations.

Cancel IVR auth

The DELETE /v3/ivr/{{id}} endpoint is used to cancel an ongoing BankID (SE) IVR auth.

DELETE /v3/ivr/{{id}}
Authorization: Basic ${ base64(accountId + ':' + secretKey) }

IDkollen will respond with HTTP status 204 for successful request, or 4xx/5xx on errors. For more information about errors, please see the Errors section.