Using BankID in the onboarding process

BankID offers several products that will simplify the onboarding process for the end user, without compromising on regulative or operational requirements.

Our experience is that businesses have very varied needs and requirements when it comes to digital onboarding. As such, you may use our BankID products differently, depending on what you need. We've described this in three sections:

Storing NNIN from end-users:
Authenticate the end user, and retrieve their national identity number with consent from BankID OIDC (optional)
Onboarding through signing:
Use electronic signing from BankID to complete the onboarding through the mutual signing of an agreement governing the customer relationship
Advanced onboarding through AML services:
Authenticate the user and employ BankID AML to retrieve more end-user information

Storing NNIN from end-users

In order to store End User's National Identity Number (fødselsnummer) in your or 3rd party's system, you are required to ask the user for consent.

BankID OIDC offers a dedicated UI and flow for collecting this consent, but you can also implement this yourself in your own systems.

The flow offered by BankID OIDC concerns merchants asking end-user consent to store their national identity number as a part of the onboarding process.

In summary the solution makes the following assumptions:

Merchants are responsible to store the end-user consent. BankID does not store consent - we simply offer a UX flow.
Ideally, merchants will only ask for consent to share NNIN once per user.
The merchant application should be able to check if a NNIN is already stored in the context of the authentication session.

The technical solution is explained here.

Please note that merchants must be provisioned to get access to the nnin_altsub and nnin scopes. You'll need a legal reason to store and use national identity numbers. This access is given as a part of the commercial agreement process.

Onboarding through signing

For some merchants, the customer onboarding process culminates in an agreement between the merchant and the end user. For such use cases, the electronic signing products from BankID can be employed to ensure a smooth way to close the deal. Please refer to our documentation for signing documents online.

Advanced onboarding through AML services

Businesses that are subject to anti money laundering legislation, should also consider our AML product. This may be implemented as an extension of the Authentication flow, where the merchant will also receive more data concerning the end user:

The end user's address, gender, birthplace and citizenship
Whether the end user appears on sanction lists or is a politically exposed person (which should force escalated measures from the merchant in terms of due diligence)

Please refer to our BankID AML page to learn more about this product.