Hi everyone,
I’m currently trying to retrieve MitID-specific claims for a test user I created using the MitID Test Tool, but I’m running into issues where these claims aren’t coming through as expected.
In the eID Hub under OIDC Clients → Access, it shows, amongst others, that the following claims should be included in the scopes I’ve selected:
mitid_organisation_cvr
organisation
mitid_employee_audit_source
mitid_employee_audit_timestamp
I have allowed the following scopes in the OIDC client:
openid mitid-business mitid-extra mitid-private-business nin profile
To test this, I’m using OAuth Tools with these parameters:
https://my-domain.signicat.com/auth/open/connect/authorize?
&client_id=sandbox-graceful-pot-754
&response_type=code
&redirect_uri=https://oauth.tools/callback/code
&state=1730025733389-QnC
&scope=openid%20profile%20nin%20mitid-private-business%20mitid-business
&code_challenge=some-challenge
&code_challenge_method=S256
&prompt=login
However, the response I receive is missing the MitID-specific claims. Here’s the response I’m getting:
{
"iss": "https://cloudsim-aps.sandbox.signicat.com/auth/open",
"nbf": 1730027486,
"iat": 1730027486,
"exp": 1730028086,
"aud": "sandbox-graceful-pot-754",
"amr": ["external"],
"at_hash": "f-4TYuQVORRQakOdj9K7dA",
"sid": "E1E764AEBB1B4E045F6C35359C4DED6F",
"sub": "6k-DgC-l-JKFl-6ry8R7YfH7jEi-X8fpAcHmmKSvlzY=",
"auth_time": 1730027485,
"idp": "mitid-private-to-business",
"name": "Hati Henriksen",
"family_name": "Henriksen",
"given_name": "Hati",
"birthdate": "1948-07-06",
"idp_issuer": "MitID-Private-To-Business",
"transaction_id": "f5527c03-00b5-cb4c-9409-e268975949ea",
"organisation": "Axels big company A/S",
"sandbox": true
}
Does anyone know how I can get the MitID-specific claims to appear? Could this be an issue related to the test user configuration? During sign-in, the user is presented with multiple company options, which might be relevant here.
Thanks in advance!