Sweden Connect - OpenID Federation Structure

	oidf-structure	June 2026
Lindström	Informational	[Page]

Abstract

The Sweden Connect identity federation for OpenID Connect is built upon OpenID Federation [OpenID.Federation]. This federation technique is relatively new, and full support for this standard by all participants within the federation cannot be assumed.¶

This document describes the Sweden Connect OpenID Federation structure and provides information for Relying Parties and OpenID Providers that do not fully support [OpenID.Federation].¶

5. Trust Marks

Section 7 of [OpenID.Federation] describes Trust Marks XXX¶

5.1. Level of Assurance Trust Marks

Table 1: Trust Mark types for Level of Assurances.
Trust Mark Type	Description
`https://id.swedenconnect.se/loa/loa2`	A holder of this Trust Mark has been approved by the Swedish Agency for Digital Government (Digg) for Level of Assurance 2 (LoA 2).
`https://id.swedenconnect.se/loa/loa3`	A holder of this Trust Mark has been approved by the Swedish Agency for Digital Government (Digg) for Level of Assurance 3 (LoA 3).
`https://id.swedenconnect.se/loa/loa4`	A holder of this Trust Mark has been approved by the Swedish Agency for Digital Government (Digg) for Level of Assurance 4 (LoA 4).

Note: ACR-values to used in OpenID Connect requests and responses are defined in Section 3.1.1 of [SC.Registry]. For historical reasons, these values do not correspond to the defined Trust Marks types.¶

5.2. Sweden Connect Contract Trust Marks

Table 2: Trust Mark types for contracts and agreements.
Trust Mark Type	Description
`https://id.swedenconnect.se/contract/sc/eid-authorization-system`	A Trust Mark type that is assigned to all Relying Parties that have signed the Auktorisationssystem för elektronisk identifiering contract and the OpenID Providers that deliver authentication services according to this contract.

Entity Identifier: https://qa.fed.swedenconnect.se/trustanchor
¶
Resolve Endpoint: https://qa.fed.swedenconnect.se/trustanchor/resolve
¶

Trust Anchor Federation Key:¶

As PEM-encoded key file:¶

As JWK:¶

{
  "crv": "P-521",
  "kty": "EC",
  "x": "ANGpYhXCeXKZzY08_O7V-oy3aCkxa24y4osBjQQiawyVlKT3GbUN-siFwVKrvad6HuzoNS2Q9ZCIyIbfpsqCJS0n",
  "y": "APdA-dZxj3YhLCyZVxoFzbBG4SwjhTrpdvT3Ai6dFcP7dhKb0lXwVyLGtRooDkirevIhe-xKeVf4Fo5pcr2LPtrk",
  "kid": "TfbPleG2EedBwk48xweaD4PMJUtJfkTUlpJBX1EWmJM=",
  "alg": "ES512",
  "use": "sig"
}

As PEM-encoded X.509 certificate:¶

7.2.2. Trust Mark Issuers

7.2.2.1. Level of Assurance Trust Mark Issuer

Entity Identifier: https://qa.fed.swedenconnect.se/tmi-loa
¶
Trust Mark Endpoint (for issuance): https://qa.fed.swedenconnect.se/tmi-loa/trust_mark
¶
Trust Mark Status Endpoint (for status check): https://qa.fed.swedenconnect.se/tmi-loa/trust_mark_status
¶

7.2.2.2. Sweden Connect Contracts Trust Mark Issuer

Entity Identifier: https://qa.fed.swedenconnect.se/tmi-contracts
¶
Trust Mark Endpoint (for issuance): https://qa.fed.swedenconnect.se/tmi-contracts/trust_mark
¶
Trust Mark Status Endpoint (for status check): https://qa.fed.swedenconnect.se/tmi-contracts/trust_mark_status¶

7.2.3. Registration Intermediate Entities

7.2.3.1. RP Registration Intermediate

Registration Portal URL: TBD
¶
Entity Identifier: https://qa.fed.swedenconnect.se/im-reg-sc
¶
Federation List Endpoint: https://qa.fed.swedenconnect.se/im-reg-sc/subordinate_listing
¶

7.2.3.2. OP Registration Intermediate

Entity Identifier: https://qa.fed.swedenconnect.se/im-reg-sc-op
¶
Federation List Endpoint: https://qa.fed.swedenconnect.se/im-reg-sc-op/subordinate_listing
¶

7.3. Sandbox

Sweden Connect Federation Tool: https://fed-tool.sandbox.swedenconnect.se ¶

7.3.1. Trust Anchor

Entity Identifier: https://fed.sandbox.swedenconnect.se/trustanchor
¶
Resolve Endpoint: https://fed.sandbox.swedenconnect.se/trustanchor/resolve
¶

Trust Anchor Federation Key:¶

As PEM-encoded key file:¶

As JWK:¶

{
  "crv": "P-521",
  "kty": "EC",
  "x": "AMrYWpNjfV_olprpgUyKVcn8ZxZOUyxTMgXukqyo-mV2mNykmaTduZ7J3hLRmbCQApqPHAu4gh75CWPHSYHuOMkF",
  "y": "AQpPeyt5YmLMtfwWGEOGGSKhqPWQBIW-BbIW9KjJ44Ks144xdARSH8EX3WedHqPpJfR_6BfC4cNRd3jWG2bGPXaf",
  "kid": "a1AS1po4oSDsTlUQ579XSeEjslh3lrVlFDhVmNyiIiQ=",
  "alg": "ES512",
  "use": "sig"
}

As PEM-encoded X.509 certificate:¶

7.3.2. Trust Mark Issuers

7.3.2.1. Level of Assurance Trust Mark Issuer

Entity Identifier: https://fed.sandbox.swedenconnect.se/tmi-loa
¶
Trust Mark Endpoint (for issuance): https://fed.sandbox.swedenconnect.se/tmi-loa/trust_mark
¶
Trust Mark Status Endpoint (for status check): https://fed.sandbox.swedenconnect.se/tmi-loa/trust_mark_status
¶

7.3.2.2. Sweden Connect Contracts Trust Mark Issuer

Entity Identifier: https://fed.sandbox.swedenconnect.se/tmi-contracts
¶
Trust Mark Endpoint (for issuance): https://fed.sandbox.swedenconnect.se/tmi-contracts/trust_mark
¶
Trust Mark Status Endpoint (for status check): https://fed.sandbox.swedenconnect.se/tmi-contracts/trust_mark_status¶

7.3.3. Registration Intermediate Entities

7.3.3.1. RP Registration Intermediate

Registration Portal URL: TBD
¶
Entity Identifier: https://fed.sandbox.swedenconnect.se/im-reg-sc
¶
Federation List Endpoint: https://fed.sandbox.swedenconnect.se/im-reg-sc/subordinate_listing
¶

7.3.3.2. OP Registration Intermediate

Entity Identifier: https://fed.sandbox.swedenconnect.se/im-reg-sc-op
¶
Federation List Endpoint: https://fed.sandbox.swedenconnect.se/im-reg-sc-op/subordinate_listing
¶

Sweden Connect - OpenID Federation Structure - draft 00

Abstract

Table of Contents

1. Introduction

1.1. Terminology

2. Federation Structure

3. Registering to the Federation

3.1. Registering a Relying Party

3.2. Registering an OpenID Provider

4. Resolving Metadata

5. Trust Marks

5.1. Level of Assurance Trust Marks

5.2. Sweden Connect Contract Trust Marks

6. Joining with Limited Support for OpenID Federation

7. Sweden Connect Federation Environments

7.1. Production

7.2. QA

7.2.1. Trust Anchor