Buypass (NO)
The Norwegian eID Buypass issues Buypass ID in both mobile and on smart card.
Enable Buypass in your services
Buypass is a trusted provider of electronic identification and authentication services in Norway. By integrating Buypass into your services, you enable secure, verified user logins using national eID standards like Buypass ID. It also enhances user trust by offering a familiar, high-assurance login experience. Whether for digital signing, secure access, or transaction authentication, Buypass helps streamline identity management with strong security.
More information about Buypass:
Information about the end user
Type | OIDC | SAML | Comments |
|---|---|---|---|
AMR | provider.amr Requires: scope=openid | PROVIDER.AMR | Auth Method Ref. JSON array of strings that are identifiers for authentication methods used in the authentication. Valid values one or more of- ["sc", "pwd", "otp", "hwk", "pin", "user"] Here hwk indicates authenticator based on security key technology i.e. Fido2 which can be requested by passing request parameter amr_values/forcepkivendor=no_buypass:id_key:organizationName. (Here organizationName is "Buypass Id Key" issuer name provided by buypass to skip the selection page.). |
Birth date | birthdate Requires: scope=profile | DOB | End user's birth date. |
Buypass personal identifier | bp_id_sub / pid Requires scope=openid | NO_BP_BUYPASSID | Unique Buypass identifier. For the OIDC protocol, this is returned in both the bp_id_sub and pid claim. |
End user certificate | certificate Requires scope=cert | CERTIFICATE | End user's Buypass certificate. The certificate is only returned if the identification was performed with "Buypass ID on smartcard". |
Distinguished name | dn Requires scope=cert | DN | Distinguished name from end user's certificate. Example: "CN=Name Nameson" |
Family name | family_name Requires: scope=profile | SURNAME | End user's surname. |
Given name | given_name Requires: scope=profile | GIVENNAME | End user's first/given name. |
Full name | name Requires: scope=profile | FULLNAME | End user's full name. |
Level of Assurance | acr | ACR | Accepts acr_values as urn:eident:acrp:level:high or urn:eident:acrp:level:substantial or urn:eident:acrp:level:low Always returns- urn:eident:cert:eidas:high |
National identifier | no_ssn / ssn Requires: scope=ssn | NO_SSN | End user's Norwegian national identifier number. |
Personal identifier. | bp_pid Requires: scope=openid | NO_BP_PID | Buypass user’s Personal identifier. |
SSN Issuing Country | ssn_issuing_country Requires: scope=ssn | SSN_ISSUING_COUNTRY | The country that issued the user's ssn. |
Handling of SSN
The social security number (SSN) of an end user can be returned if you are allowed to receive this. The SSN is returned as the no_ssn and ssn claim (if the ssn scope is set in OIDC identification request) or as NO_SSN in the assertion (SAML).
User experience
select identification method
Buypass in web
Buypass ID in Mobile-Password/SMS
Step 1.
Step 2.
Step 3.
Buypass logo
If needed, the Buypass logo can be downloaded from https://www.buypass.no/ressurser/foto-logo .