Sweden Connect Specifications

October 2026

Copyright © The Swedish Agency for Digital Government (Digg), 2015-2026. All Rights Reserved.

This is the October 2026 version of the Sweden Connect Framework. It replaces the previous December 2024 release as the official version of the Sweden Connect Framework.

Changes since the last version

Below is a list of significant changes since the December 2024 release of the Sweden Connect Framework.

• Changes to OpenID Connect Profile for Sweden Connect:
  • Section 2.4, "Signature Extension Support", was added. It defines the requirements for OpenID Provider support of the Signature Extension specified in Signature Extension for OpenID Connect – Version 1.2.
  • In Section 2.2.1, the requirement that an OP MUST treat a request without a `prompt` parameter as a request where `login` is supplied was changed to a recommendation. The reason for this is to avoid breaking existing implementations.
  • Section 2.3.3.2, "The sub Claim", was added. It requires OpenID Providers to support pairwise Subject Identifiers, and states that an OpenID Provider can use the sector_identifier_uri client metadata parameter without validating the referenced document. Also, in Section 2.1, a requirement that the subject_types_supported parameter MUST contain both public and pairwise was added.
  • Section 2.2.4, "Requested Authentication Context Class Reference (acr)", was added. It clarifies how an OpenID Provider processes requested Authentication Context Class Reference values.
• Changes to OpenID Connect Claims and Scopes Specification for Sweden Connect:
  • The custom claim https://id.swedenconnect.se/claim/eidasPersonIdentifier was replaced with the http://eidas.europa.eu/attributes/naturalperson/PersonIdentifier claim for representing an eIDAS Person Identifier.
• The specification Sweden Connect – Security Requirements 1.0 was introduced. This specification defines security requirements for participants in the Sweden Connect identity federation. It establishes baseline requirements for transport protection, cryptographic algorithms, key lengths, and key rollover that apply to both the SAML and the OpenID Connect parts of the federation.
• The specification Sweden Connect – OpenID Federation Rules and Policies 1.0 was introduced. This document states the rules and policies of the Sweden Connect OpenID Connect federation.
• The signature specifications DSS Extension for Federated Central Signing Services, Implementation Profile for using OASIS DSS in Central Signing Services and Certificate Profile for Certificates Issued by Central Signing Services were updated to support OpenID Connect as an authentication scheme during a signature operation.
• The specification "Implementation Profile for BankID Identity Providers within the Swedish eID Framework" was removed from the Technical Framework.

Each document also contains a "Changes between versions" section where you can see what has been updated for that particular specification.

For a detailed list of changes, see GitHub: https://github.com/swedenconnect/technical-framework/compare.

Common Publications

• En introduktion till Sweden Connect Tekniskt ramverk – In Swedish
• Introduction to the Sweden Connect Technical Framework – In English
• Sweden Connect – Registry for Identifiers – version 1.9
• Sweden Connect – Security Requirements 1.0

SAML Specifications

• Deployment Profile for the Swedish eID Framework – version 1.9
• Attribute Specification for the Swedish eID Framework – version 1.8
• Entity Categories for the Swedish eID Framework – version 1.9
• eIDAS Constructed Attributes Specification for the Swedish eID Framework – version 1.2
• Principal Selection in SAML Authentication Requests – version 1.0
• User Message Extension in SAML Authentication Requests – version 1.0

OpenID Connect Specifications

• OpenID Connect Profile for Sweden Connect – version 1.1
• OpenID Connect Claims and Scopes Specification for Sweden Connect – version 1.1
• Sweden Connect – OpenID Connect Metadata Requirements – version 1.0
• Sweden Connect – OpenID Federation Rules and Policies 1.0 – version 1.0

Signature Specifications

• Implementation Profile for using DSS in Central Signing Services – version 1.7
• Certificate Profile for Central Signing Services – version 1.3
• DSS Extension for Federated Signing Services – version 1.6
• Signature Activation Protocol – version 1.2