Federation and metadata
Joining the Sandbox OpenID Federation is currently done by sending an email to operations@swedenconnect.se. Operations will assist you in adding your service to the federation.
A self-service portal will be introduced later.
All settings needed to operate within the federation are documented in OpenID Federation Settings.
OpenID Providers
By adding an OIDC Relying Party to the Sandbox federation you can test your service against all OpenID Providers in the federation. Below is a listing of the official reference implementations for the Sweden Connect Technical Framework:
Sweden Connect Reference OpenID Provider
- Entity Identifier
- https://converter.sandbox.swedenconnect.se/proxy/realms/SwedenConnectSandboxReferenceIdP
eIDAS Connector OP for test
- Entity Identifier
- https://converter.sandbox.swedenconnect.se/proxy/realms/ForeigneID
These providers are currently proxy services in front of the corresponding SAML Identity Providers. Native OpenID Providers will be introduced later.
Test Support for OPs
The Sweden Connect Test Client is a tool that acts as an OpenID Connect Relying Party, so you can exercise your OpenID Provider from the other side of the protocol.
An authentication request is assembled as a set of parameters that can be edited freely before anything is sent, so you can deliberately produce requests a compliant Relying Party would refuse to build. When the user returns, the response is decoded, its signature and contents are validated, and everything is presented as it was received. The tool supports OpenID Federation on the consumer side: OpenID Providers are discovered through subordinate listings and configured from the metadata returned by a trust anchor's resolve endpoint, so no manual configuration is needed to test against them.