- eIDs
- Danish MitID Erhverv
eIDs
Danish MitID Erhverv
Learn more about Danish MitID Erhverv token contents, how to request business logins and how to create test users.
JWT/Token examples
MitID for company signatories
MitID Erhverv (MitID for business)
The sub, nameidentifier and uuid values here will not be the same as for a corresponding citizen-MitID login, even if the user chose to use their personal MitID for login.
Request business logins
You can request a login in business context via the following acr_values: urn:grn:authn:dk:mitid:business.
Alternatively, you can send a login_hint=business or login_hint=business_optional query parameter in the authorize request.
This will allow company signatories and employees to log in to your site or application with their personal MitID or their dedicated employee MitID (depending on how they have been setup in MitID Ervherv).
login_hint=business will allow logging in as a business user.
login_hint=business_optional will give an option to choose to log in as a private individual, or a business user.
You can read more about the login_hint here.
You can determine which kind of option the user selected by inspecting the claim values in the JWT payload.
- Employee logins will have an
employeeclaim with valuetrue. - Company signatory logins will have a
companySignatoryclaim with valuetrue. - Private logins will have neither of the above.
Test users
To test business logins with MitID Erhverv, you will start by creating a test organization and a test user, and then connect the test user to the organization as an employee.
Detailed instructions, along with a video demonstration, are provided below to guide you through the process.
Create test organization
Go to the test organization creation page and fill in the form: https://testportal.test-devtest4-nemlog-in.dk/
The wizard will generate an organization admin account with username/password credentials. The password is self-supplied, and the username is autogenerated.
The organization admin can then log in with username and password in the "Test login" tab in the NemLog-in IdP (aka "EIA"): https://erhvervsadministration.test-devtest4-nemlog-in.dk/
- After you login with the organization admin user, you must explicitly enable the use of personal MitID (per organization) under Settings (Indstillinger => Identifikationsmidler).
Create test users
Manually create a test user in both:
- MitID Test Tool: https://pp.mitid.dk/test-tool/frontend/#/create-identity
- MitID Simulator: https://mitidsimulator.test-devtest4-nemlog-in.dk/Home/Create
Test users CAN HAVE the same user ID.
Test users MUST HAVE a CPR number, and it MUST BE the same in the 2 test-user creation tools listed above.
When creating a test user with MitID Simulator, make sure to add a CPR number and check the Private MitID checkbox:
In general, and most likely for MitID Erhverv production, CPR numbers are expected to be optional.
Connect user to organization as an employee
Please note: creating test users is a required step. The auto-generated admin user you created for a test organization CANNOT be used for employee login.
- Once the test users are created, the organization admin can create an employee in EIA.
When logged in as an admin user, you have the option to choose additional information to include when creating test users. For instance:
- SE number (administrative unit a user belongs to)
- P number (location a user is associated with)
- RID (Resource Identification Number, can be used for linking to NemID)
This can be done under Settings (Indstillinger => Oprettelse af brugere):
If P and SE numbers are enabled for an organization after test users have been created, each user must be manually updated to get these values.
This is done by editing the user configuration section, under "Organisation":
An activation link will be sent to the specified employee email. You can use your personal email for both the organization admin and the employee email.
If you followed the steps correctly, your EIA dashboard will look something like this:
If the organization admin has enabled use of personal MitID, the test employee can use their own test MitID for activation/onboarding, but a unique employee MitID username MUST BE specified during enrolment.