Introduction

IDkollen provides a JSON/REST API for authenticating with Vipps (NO).

The API is only accessible with TLS/SSL and a unique key provided by IDkollen. The Access key pair is private and should not be shared with a third party. The API should only be called from a server application, not directly from the client.

When signing up you will receive API keys for IDKollens staging and live environment.

Environment	URL	Callback IP
Live	https://api.idkollen.se/	13.53.114.219 13.48.243.11
Staging	https://stgapi.idkollen.se/	13.53.56.116 13.53.92.159

Usage flow

1. The user initiates an authentication via the partner's interface.
2. The partner calls IDkollen's API with the secret key to get the login link to Vipps.
3. The partner sends the login link to the end user to use to authenticate themselves with.
4. Once the end user has authenticated themselves, the user will be redirected to a redirect URL provided to IDkollen by you, with a code.
5. The partner uses the code to verify the end user's credentials with.
6. IDkollen will respond with the end user's credentials.

Test users

The following test users are available:

National ID (SSN)	Phone number	Verification code
55074308332	+4790881716	1236

The test app can be installed using this guide.

Authentication

To initiate requests to the API a secret key is needed. To request a secret key, contact support@idkollen.se. All API endpoints are authenticated using Basic Auth, where the "username" is the API key (account ID) and the "password" is the secret key.

Authorization: Basic ${ base64(accountId + ':' + secretKey) }

More information

If you have any questions, please contact us at support@idkollen.se.