Authenticate Users to a Digital Service

Allow users to sign in with their TRIDENT ID Account, use Single Sign-On and complete stronger authentication when required.

Government agencies and authorised organisations can delegate user authentication to TRIDENT instead of creating and maintaining separate login systems.

The TRIDENT ID Account, referred to as Online ID in the technical documentation, provides a common national sign-in capability for connected services.

Authentication options

Depending on the service and required assurance level, users may authenticate with:

  • username and password;
  • a one-time password sent by email;
  • Mobile ID approval;
  • the physical TRIDENT ID Card, where enabled;
  • a Wallet-based identity interaction, where enabled.

How it works

  1. The user selects a connected service.
  2. The service redirects the user to TRIDENT.
  3. TRIDENT authenticates the user using an approved method.
  4. The service receives the authorised authentication result and permitted identity claims.
  5. Stronger authentication can be requested for sensitive actions.

TRIDENT can also support Single Sign-On across connected services, provided that the session, assurance level and requested claims remain valid for the new service.

Step-up authentication

A service can request an additional factor when the user:

  • approves a sensitive transaction;
  • accesses protected information;
  • changes important account information;
  • shares verified data;
  • initiates a digital signature.

Mobile ID, OTP, the ID Card or another approved factor can be used according to the service policy.

Integration options

Services can integrate through:

  • OpenID Connect;
  • OAuth 2.0;
  • SAML 2.0 where applicable;
  • registered clients and redirect URIs;
  • approved scopes and identity claims;
  • Sandbox testing and controlled Production onboarding.

Each relying party remains limited to its approved service, purpose and permissions.

View Developer Resources