Service description

Suomi.fi e-Identification is a joint identification service for public administration. The service enables electronic authentication of the end-user in e-services and makes it possible to use the different e-services with a single sign-on.

Suomi.fi e-Identification verifies the identification data offered by the Finnish identification tokens by comparing the information with the information in the Population Information System. If the end user has been authenticated using a strong authentication method, the information is complemented with information from the Population Information System according to the needs of the e-service.

Public administration organisations can join the service and use it free of charge. The use of the service is subject to a fee for organisations that are not part of public administration nor a company owned by a public sector entity. The costs incurred for the use of the identification tokens are managed centrally by the Digital and Population Data Services Agency.

Online use of the e-services connected to Suomi.fi e-Identification is secure and easy. Moving between services is flexible as only one login is required. Suomi.fi e-Identification offers a wide range of identification tokens to end-users. The service is available in Finnish, Swedish and English.

Identification tokens

By joining Suomi.fi e-Identification, the e-service of the customer organisation gains access to identification tokens connected to it:

online banking codes
mobile IDs
hightrust.id
electronic ID cards
healthcare smart cards and organisation cards issued by the Digital and Population Data Services Agency
foreign identification tokens
Finnish Authenticator (The service is subject to a fee and is not automatically included in the selection of identification tokens).

The Digital and Population Data Services Agency maintains a selection of identification tokens and takes care of any agreements with the identification token providers. All identification tokens are available to e-services through a uniform technical interface.

In the Suomi.fi e-Identification, the assurance levels provided by the identification tools are determined according to the definition of the Finnish Communications Regulatory Authority. Identification tools with a high level of assurance are the electronic ID card, healthcare smart cards and organisation cards. Identification tools providing a substantial level of assurance are online banking codes, hightrust.id and the mobile ID.

eIDAS has similar levels of assurance. In addition to the pevious, there is also Finnish Authenticator, which do not have a defined level of assurance.

The e-service determines which level of assurance is adequate for it and which other identification tools it accepts. Accepting the substantial level of assurance always means that tools with a high level of assurance level must also be accepted.

Suomi.fi identification returns information about the identified user to the service according to the identification method used and the information that can be transmitted from the identification tool and background systems.

Population Information System

During the identification event, Suomi.fi identification can provide up-to-date personal information about the end user from the Population Information System. The prerequisite for the transfer of information is that the identification tool used is at levels http://ftn.ficora.fi/2017/loa2 or http://ftn.ficora.fi/2017/loa3 (online banking credentials, mobile certificate, or certificate card). Utilizing information from the Population Information System requires a usage permit. The scope of the usage permit to be applied for depends on the information to be transmitted to the service. The table below lists the scope of the usage permit required for each piece of information.

Person’s unique identifier

In bank, mobile certificate, and certificate card identification, the unique identifier is the personal identity code. In eIDAS identification, the unique identifier is the PersonIdentifier. In Finnish Authenticator identification, the unique identifier is the Foreign Person Identifier.

Attributes transmitted about the eIDAS-identified user

The biggest difference between eIDAS identification and Finnish identification tools is that the Finnish personal identity code is not returned for an eIDAS-identified user. The returned personal identifier can be very different in form from the Finnish personal identity code. Fully eIDAS-capable services must be prepared for this. During eIDAS identification, information from the Population Information System cannot be transmitted about the user. However, standard information listed in the table below is transmitted for all users. The transfer of this information does not require a data permit from the service.

Person’s unique identifier in eIDAS identification

In eIDAS identification, a unique identifier, PersonIdentifier (PID), is transmitted about the user. The format of the identifier varies by country. No general conclusions can be drawn about its structure, such as the date of birth from the Finnish personal identity code. Not all eIDAS countries have a centralized Population Information System like Finland. The identifier may be tied to the identification tool (e.g., the document number of an identity card) and change when the tool is renewed. There are also no generally defined limits for the length of the PID identifier, which must be taken into account in software processing the identifier. However, eIDAS guarantees the fulfillment of these conditions:

The person is strongly identified.
The identification tool used meets the eIDAS notification requirements for the respective level of assurance.
The person’s identifier is unique, meaning the same identifier cannot be used by another person.

Finnish Authenticator

The use of the Finnish Authenticator service in Suomi.fi e-Identification is subject to a fee and requires that the user approve separate terms of use. Note that the Finnish Authenticator application is not a strong identification tool.

Attribute	URI	Permit	Identification tool / LoA - level
Social security number, hetu	urn:oid:1.2.246.21	Limited personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Foreign person identifier	urn:oid:1.2.246.517.3002.111.17	Limited personal data	urn:oid:1.2.246.517.3002.110.7
PersonalIdentifier	http://eidas.europa.eu/attributes/naturalperson/PersonIdentifier	Limited personal data	http://eidas.europa.eu/LoA/high, http://eidas.europa.eu/LoA/substantial
Birth Date	http://eidas.europa.eu/attributes/naturalperson/DateOfBirth	Limited personal data	http://eidas.europa.eu/LoA/high, http://eidas.europa.eu/LoA/substantial, urn:oid:1.2.246.517.3002.110.7
Name, common name	urn:oid:2.5.4.3	Limited personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Full name	urn:oid:2.16.840.1.113730.3.1.241	Limited personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
calling name	urn:oid:2.5.4.42	Limited personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Surname	urn:oid:2.5.4.4	Limited personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2, urn:oid:1.2.246.517.3002.110.7
Surname (eIDAS)	http://eidas.europa.eu/attributes/naturalperson/CurrentFamilyName	Limited personal data	http://eidas.europa.eu/LoA/high, http://eidas.europa.eu/LoA/substantial,
First name	http://eidas.europa.eu/attributes/naturalperson/CurrentGivenName	Limited personal data	http://eidas.europa.eu/LoA/high, http://eidas.europa.eu/LoA/substantial, http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2, urn:oid:1.2.246.517.3002.110.7
Home municipality municipality number	urn:oid:1.2.246.517.2002.2.18	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Home municipality name Finnish	urn:oid:1.2.246.517.2002.2.19	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Home municipality name in Swedish	urn:oid:1.2.246.517.2002.2.20	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Permanent domestic local address, street address in Finnish	urn:oid:1.2.246.517.2002.2.4	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Permanent domestic local address, street address in Swedish	urn:oid:1.2.246.517.2002.2.5	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Permanent domestic local address, postal code	urn:oid:1.2.246.517.2002.2.6	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Persistent domestic local address, post office in Finnish	urn:oid:1.2.246.517.2002.2.7	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Persistent domestic local address, post office in Swedish	urn:oid:1.2.246.517.2002.2.8	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Permanent foreign street address	urn:oid:1.2.246.517.2002.2.11	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Permanent foreign local address, city and state in Finnish	urn:oid:1.2.246.517.2002.2.12	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Permanent foreign local address, city and state in Swedish	urn:oid:1.2.246.517.2002.2.13	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Persistent foreign local address, city and state in plain text	urn:oid:1.2.246.517.2002.2.14	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Current foreign local address, state code	urn:oid:1.2.246.517.2002.2.15	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
E-mail	urn:oid:0.9.2342.19200300.100.1.3	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Blocking information	urn:oid:1.2.246.517.2002.2.27	Medium-extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2
Finnish citizenship	urn:oid:1.2.246.517.2002.2.26	Extensive personal data	http://ftn.ficora.fi/2017/loa3, http://ftn.ficora.fi/2017/loa2

Description	URI	SAML2-exemple
The person's current first name. The same attribute is used with Finnish identification methods.	http://eidas.europa.eu/attributes/naturalperson/CurrentGivenName	<saml2:Attribute FriendlyName="FirstName" Name="http://eidas.europa.eu/attributes/naturalperson/CurrentGivenName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" > <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="eidas-natural:CurrentGivenNameType" >PÃ¤r</saml2:AttributeValue> </saml2:Attribute>
Person's current surname. This attribute does not pass on Finnish persons' surname information if a Finnish identification tool is used.	http://eidas.europa.eu/attributes/naturalperson/CurrentFamilyName	<saml2:Attribute FriendlyName="FamilyName" Name="http://eidas.europa.eu/attributes/naturalperson/CurrentFamilyName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" > <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="eidas-natural:CurrentFamilyNameType" >Kiwi</saml2:AttributeValue> </saml2:Attribute>
Persons birth date in format xsd:date , YYYY + “-“ + MM + “-“ + DD This attribute does not disclose the date of birth of Finnish persons if a Finnish identification method has been used.	http://eidas.europa.eu/attributes/naturalperson/DateOfBirth	<saml2:Attribute FriendlyName="DateOfBirth" Name="http://eidas.europa.eu/attributes/naturalperson/DateOfBirth" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" > <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="eidas-natural:DateOfBirthType" >1978-09-05</saml2:AttributeValue>
An identifying code according to the eIDAS regulation (see additional information below). If a Finnish identification method is used, this attribute is not used.	http://eidas.europa.eu/attributes/naturalperson/PersonIdentifier	<saml2:Attribute FriendlyName="PersonIdentifier" Name="http://eidas.europa.eu/attributes/naturalperson/PersonIdentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" > <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="eidas-natural:PersonIdentifierType" >CX/FI/35092322</saml2:AttributeValue> </saml2:Attribute>

The use of the Finnish Authenticator service in Suomi.fi e-Identification is subject to a fee and requires that the user approve separate terms of use.

First name	http://eidas.europa.eu/attributes/naturalperson/CurrentGivenName
Surname	urn:oid:2.5.4.4
Foreign person identifier	urn:oid:1.2.246.517.3002.111.17
Birth date	http://eidas.europa.eu/attributes/naturalperson/DateOfBirth

Finnish Authenticator can be added with the identification tool urn:oid:1.2.246.517.3002.110.7.

Updated: 8/4/2026

Service description

Identification tokens

Population Information System

Person’s unique identifier

Attributes transmitted about the eIDAS-identified user

Person’s unique identifier in eIDAS identification

Finnish Authenticator

More on the topic

Are you satisfied with the content on this page?

Digitalise your service path

Enhance information management

Improve service quality

Protect your data

Open, share and utilise data

Enhance information management

Protect your data

Develop responsibly

Open, share and utilise data

Service description

Identification tokens

More on the topic

Are you satisfied with the content on this page?