This page is meant for BankID merchants collecting the national identity number on their own site
This document explains how BankID merchants collecting the national identity number at their own site can implement xID to simplify their users login with BankID.
As a BankID merchant collecting the national identity number on your own site, xID is not able to automatically prefill the national identity number of the user when logging in with BankID. But you can still use xID to simplify the BankID login experience in the following way, considering the three different states of the user:
Not recognised with xID
There are two ways to enroll a user that is not recognised with xID:
- Enable the user to create his xID through a button at your website
You can present a button "Opprett din xID her"/"Create your xID here" at your website, accompanied with some information about xID. This requires an implementation of xID using the login hint XID:userintent.
- Lead the user to create his xID at xid.no
You can lead the user to xid.no to create his xID-user, simply by presenting a link at your website to www.xid.no with some information about xID.
Recognised with xID, but has not accepted to use xID every time at your website
A user recognised with xID, which has not accepted to use xID every time at your website, can be prompted with xID instead of entering his national identity number when logging in with BankID. You can offer this simplified login experience by implementing the login hint XID:unsolicited at your login site, and a login button for the recognised xID users.
Recognised with xID, and has accepted to use xID every time at your website
A user recognised with xID, which has accepted to use xID every time at your website, will meet a login button saying "Continue as Kari Nordmann" instead of entering his or her national identity number.
This means that even though you collect the national identity number for BankID on your own website, you can still offer your customers a simplified login experience with xID. To do this you need to:
- Implement xID with the login hint XID:unsolicited at your login site
- Implement a button or link for the recognised xID users to use instead of entering their national identity number
- Provide the user a way to disconnect his xID from your website, as described here: User experience design
We do not recommend using the login hint XID:userintent on your login site, as this implies that the user might have to stepup to BankID if he is not recognised with xID, risking that he confuses xID and BankID as two different products.