Issue with Swedish Bankid and OIDC

Question:

We are building a solution using OIDC for communicating with Signicat.

We wish to send the prefilled.redirect parameter to Signicat to avoid redireecting to Safari in iOS, but I am not sure exactly where to put it? Should it be sent to the authorize endpoint together with other claims, or are there another endpoint to send it to? Should it be structured as a claim, a url query parameter?

Answer:

Most of the “prefilled.foo” paramters used in other contexts for Signicat in the enterprise platform, can be translated for OIDC using login_hint.

The login_hint is added to the authorize request as query param, to add the redirect an example would be:

&login_hint=redirect-{AppUri}

This will override the redirect sent to the BankID app and ensure that you are redirected back to your application, instead typically Safari on iOS devices.

https://developer.signicat.com/enterprise/docs/authentication/about-oidc.html#endpoints

This post has been migrated from the previous community