Telia Tunnistus Identification Broker

Telia Tunnistus is Telia Finland's identification broker service — an OpenID Connect and OAuth 2.0 identity provider that brokers Finnish strong electronic identification. The OpenID discovery document is served anonymously at tunnistus.telia.fi with issuer https://tunnistus.telia.fi/uas, supporting authorization_code, client_credentials, refresh_token, password and SAML2 bearer grants. Notably it does NOT advertise a CIBA backchannel authentication endpoint, which is the grant CAMARA specifies for network-based authorization. Integration guides are published as PDFs in a Telia GitHub repository.

API entry from apis.yml

apis.yml Raw ↑
aid: telia:telia-tunnistus-identification-broker
name: Telia Tunnistus Identification Broker
description: Telia Tunnistus is Telia Finland's identification broker service — an OpenID Connect and
  OAuth 2.0 identity provider that brokers Finnish strong electronic identification. The OpenID discovery
  document is served anonymously at tunnistus.telia.fi with issuer https://tunnistus.telia.fi/uas, supporting
  authorization_code, client_credentials, refresh_token, password and SAML2 bearer grants. Notably it
  does NOT advertise a CIBA backchannel authentication endpoint, which is the grant CAMARA specifies for
  network-based authorization. Integration guides are published as PDFs in a Telia GitHub repository.
humanURL: https://github.com/telia-oss/tunnistus
baseURL: https://tunnistus.telia.fi/uas
tags:
- Identity
- OpenID Connect
- OAuth
- Strong Authentication
- Finland
properties:
- type: Documentation
  url: https://github.com/telia-oss/tunnistus
- type: OpenIDConnectDiscovery
  url: https://tunnistus.telia.fi/.well-known/openid-configuration
- type: WellKnown
  url: well-known/telia-openid-configuration.json
- type: SourceCode
  url: https://github.com/telia-oss/tunnistus