Backend integration-CIBA flow

⚙️ Customer Initiated Flows Implementation Sequence

To implement any of the Customer Initiated flows, you will need to follow the sequence below:

1. From your backend servers, call the CIBA endpoint of eIdent and the CIBA protocol to start a new transaction, indicating what kind of transaction (provisioning, Authentication or Consent).

2. Extract the process identifier within the response (auth_req_id) and send it over to your app.

3. In your app, use the process identifier within the response (auth_req_id) to start the chosen transaction by invoking the appropriate SDK APIs.

4. Wait for the user to complete the process (alternatively, poll the server for updates).

5. From your backend servers, poll the token endpoint of the eIdent server with the process identifier (auth_req_id) to retrieve the ID token with the result of the transaction.

6. Use the access token from within the ID token, and call the UserInfo endpoint of the eIdent server to get extra information related to the transaction (optional).

🔀 CIBA Flow Diagram

CIBA Flow for Provisioning, Authentication and Consent processes.svg