Use Case Finnish services for citizens

Introduction

The following are some identity selector requirements of commercial and government services in Finland.

Requirements

Grouping of IdPs

In the screenshots below, IdPs are grouped in different ways. Examples of possible groupings and reasons for grouping

• Most common group first
• Most desirable first
• Cheapest first
  • In these scenarios, banks provide a commercial identity service and the government charges also for identity card use.

In one service (not shown here), the selection process has been made as simple as possible using multiple step process with multiple screens:

• Bank or Identity Card?
  • If Bank
    • Select Bank
  • If Identity Card
    • Prompted to insert card

Ordering of IdPs

Within groups of IdPs, the listing order is defined. Note banks are not listed in alphabetical order, rather in order of popularity.

Locale selection

The ISA cannot always determine the locale of the user based on browser settings.The user typically has selected a language at the RP prior to the ISA process.The user selected language for a given site may or may not reflect the browser settings. The IdPs shown in the selector may not support the user's selected language.

The user may change their locale throughout the login process (at the ISA or at the IdP). This language change is relayed with the assertion.

Examples

Example 1

In the case shown below, certain IdPs are not shown by default, but require first a click to reveal a list, and then a selection from a drop down list.

Example 2

In this example (B2G government services), banks are listed first, national identity card second and third are different types of government issued company credentials. IdP Proxy with dynamic selection based on authn context class.