Guides & Tools
How to leverage Criipto Verify's Age Verification extension
With the Age Verification extension, you can verify user ages without collecting personal data. The authentication result will simply confirm if the user meets the age requirement, without including sensitive information such as their full name or birthdate.
Age Verification does not require you to set up your own eID provider, as it defaults to using shared Criipto-provided eID providers. This batteries included approach comes with certain limitations, such as the absence of many tenant-specific features.
For instance, the Custom styling feature is not available out of the box for Age Verification applications. To enable it, you can switch to using your own MitID provider.
You'll need a Criipto tenant and domain to get started.
If the Age Verification application type is not available, or you're running into any issues during application creation, please contact us via Slack or by email.
Age verification is triggered via a standard OpenID Connect integration using the following settings:
acr_values=urn:age-verification
login_hint=country:{country}
, {country}
can be one of DK
|SE
|NO
|FI
. This determines the eID provider for user authentication.scope=openid is_over_18
; Other supported values are: is_over_15
, is_over_16
, is_over_21
.The resulting JWT will indicate whether the user meets the age requirement. Personal data, such as the user's full name and birthdate, is not included.
The sub
field is random for each login and cannot be used to correlate the user.
https://criipto-verify-prod.criipto.id/oauth2/authorize?
scope=openid openid is_over_18&
client_id=urn:criipto:dev&
redirect_uri=https://jwt.io&
response_type=id_token&
response_mode=fragment&
nonce=ecnon-&
acr_values=urn:age-verification&
login_hint=country:DK
If you prefer to use your own MitID service provider instead of the one provided by Criipto, you have the option to do so.
During installation, flip the Use own MitID setting to enabled, and then ensure that your Criipto application has allowed https://{YOUR_CRIIPTO_DOMAIN}/extensions/ext_ageverification/api/callback
as a callback URL.