MitID claims for private-to-business and mitid-business

MitID
1

Hi everyone,

I’m currently trying to retrieve MitID-specific claims for a test user I created using the MitID Test Tool, but I’m running into issues where these claims aren’t coming through as expected.

In the eID Hub under OIDC Clients → Access, it shows, amongst others, that the following claims should be included in the scopes I’ve selected:

mitid_organisation_cvr
organisation
mitid_employee_audit_source
mitid_employee_audit_timestamp

I have allowed the following scopes in the OIDC client:

openid mitid-business mitid-extra mitid-private-business nin profile

To test this, I’m using OAuth Tools with these parameters:

https://my-domain.signicat.com/auth/open/connect/authorize?
&client_id=sandbox-graceful-pot-754
&response_type=code
&redirect_uri=https://oauth.tools/callback/code
&state=1730025733389-QnC
&scope=openid%20profile%20nin%20mitid-private-business%20mitid-business
&code_challenge=some-challenge
&code_challenge_method=S256
&prompt=login

However, the response I receive is missing the MitID-specific claims. Here’s the response I’m getting:

{
  "iss": "https://cloudsim-aps.sandbox.signicat.com/auth/open",
  "nbf": 1730027486,
  "iat": 1730027486,
  "exp": 1730028086,
  "aud": "sandbox-graceful-pot-754",
  "amr": ["external"],
  "at_hash": "f-4TYuQVORRQakOdj9K7dA",
  "sid": "E1E764AEBB1B4E045F6C35359C4DED6F",
  "sub": "6k-DgC-l-JKFl-6ry8R7YfH7jEi-X8fpAcHmmKSvlzY=",
  "auth_time": 1730027485,
  "idp": "mitid-private-to-business",
  "name": "Hati Henriksen",
  "family_name": "Henriksen",
  "given_name": "Hati",
  "birthdate": "1948-07-06",
  "idp_issuer": "MitID-Private-To-Business",
  "transaction_id": "f5527c03-00b5-cb4c-9409-e268975949ea",
  "organisation": "Axels big company A/S",
  "sandbox": true
}

Does anyone know how I can get the MitID-specific claims to appear? Could this be an issue related to the test user configuration? During sign-in, the user is presented with multiple company options, which might be relevant here.

Thanks in advance!

2

Hi,
Thank you for your questions. We have previously responded to you via our support system about this, but we’re happy to share some of the information here as well to make it visible for you and the rest of our community members.

To resolve the issue with the missing MitID-specific claims, we made an update to your OIDC client configuration. Specifically, we updated the Advanced settings in your OIDC client to include ALL user-data instead of the default standard scopes. This adjustment allows the following claims to be included in the response:

  • mitid_organisation_cvr
  • organisation
  • mitid_employee_audit_source
  • mitid_employee_audit_timestamp

After this update, you should see the MitID-specific claims in the response.

Have a great day!