E-sign compatibility matrix

 The following table shows a list of the functionality in the BankID sign service, and an overview of supported platforms and envelope formats.


BankID ServerBankID OIDC
FunctionSEID SDOPAdESSEID SDOPAdES
Both end user signature and merchant signature(tick)(tick)(tick)(tick)
Merchant signature only(tick)(error)(error)(error)
End user signature only(tick)(tick)(error)(tick)
Multiple end user signatures in the same envelope(tick)(tick)(error)(tick)
PAdES turnkey modeN/A(tick)N/A(tick)
PAdES self assembler modeN/A(tick)N/A(error)



Note that the end result of multiple end user signatures in the same envelope is achieved in different ways for the two envelope formats. For SEID SDO flows, signatures must be gathered from multiple independent signing sessions over the same documents, then assembled into a SEID SDO. Since every signatory signs over the exact same bytes, the order does not matter, and the signings can happen in parallel. This is therefore also referred to as parallel signing.

For PAdES flows, the signed PDF output from one signing session is simply used as input for the next signing session. For a given session, any and all signatures that already exist in the document, are part of the data that is signed over. Because of this, the order in which the signatories sign the document matters. This is therefore also referred to as serial signing.