Specified schedule for the OIDC interface release in Suomi.fi e-Identification

Suomi.fi e-Identification will introduce an interface that supports the OpenID Connect protocol instead of the SAML 2.0 standard. In the change, the current SAML interface will be replaced with a new OIDC interface. The deployment of the new interface requires measures from e-services.  After a transition period, the current SAML interface for Suomi.fi e-Identification will be discontinued. Read more in the previous article: https://kehittajille.suomi.fi/topical/suomi-fi-tunnistus-ottaa-kayttoon-openid-connect-rajapinnan-muutos-vaatii-toimenpiteita-asiointipalveluilta

Schedule for the deployment of the OIDC interface 

Schedule for the OIDC interface

• The test environment will open on 3 December 2026. We will issue a separate notice for when the API is open for customer testing.
• The production environment will open in 28 January 2027. We will issue a separate notice for when the API is open.
• The transition period ends on 1 June 2028. After this, identification through the SAML interface will no longer work.  

The deployment of the test environment and production environment does not need to be carried out at the same time as the publication of the OIDC interfaces by Suomi.fi e-Identification. E-services can make the transition according to their own schedules, taking the transition period of the interface change into account.  Individual e-services must test the changes before production roll-out. 

E-services must have transitioned to the OIDC interface by 1 June 2028. During the transition period, the current Suomi.fi e-Identification SAML interface will remain supported. It is advisable to start scheduling and planning the transition in your organisation immediately to complete the process for your e-service within the transition period.  The current SAML interface will be discontinued in Suomi.fi e-Identification on 1 June 2028. After this, identification through the SAML interface will no longer work.  

Changes to Suomi.fi e-Identification certificate practices

We had announced the changes to the certificate practice in Suomi.fi e-Identification earlier. You can read the previous release at https://kehittajille.suomi.fi/topical/changes-to-suomi-fi-e-identification-certificate-practices-action-required-from-e-services.

We are giving the e-services one additional year to verify the validity of the SAML certificates. Validity checks for expired certificates will begin on 1 January 2028. This additional time allows e-services to deploy the OIDC-interface before the validity checks for TLS certificates begin. If an e-service is using outdated environments that need to be deleted, they must request the deletion of these environments from tunnistus-kayttoonotot@dvv.fi. E-service operators cannot delete these environments on their own.

We provide support for the deployment of the OICD interface 

We will hold an information event on the new OIDC interface.  You will receive an email with detailed instructions for registering for the information event in the coming weeks. We will publish instructions on deploying the OIDC interface and provide support for the deployment of the interface.