Find out more Read more about Altinn Authentication About Altinn Authentication About Altinn Authentication What do you get? Get started Create your first resource Create your first resource Use systemusers as system vendor Use systemusers as API provider »
Under arbeid. Ting kan endres. Vi tar gjerne imot innspill. Omtrent 50% av skjematrafikken kommer via API, med enkelte tjenester som har nesten 100% fra fagsystemer. Nye autentiserings- og autorisasjonsmekanismer utvikles nå for maskin-til-maskin-integrasjon på Altinn-plattformen og andre offentlige API-er. Maskinporten og systembrukertoken Maskinporten står sentralt i dette nye konseptet. Alle som skal benytte API med systembruker må autentisere seg mot Maskinporten for å motta et systembrukertoken. Forskjeller fra vanlige maskinportentokens: »
The authentication component is not an ID-provider and only create authentication sessions based on external ID-providers. The authentication component creates JWT tokens with claims about user and system. The claims are based on the authentication information coming from the ID-providers. Token exchange for Altinn Portal When a user logs in to the Altinn Portal (Legacy Solution) it gets a Cookie containing information about the logged-in user. This cookie is a propiaritary format for ASP. »
The profile component is an ASP.Net Core MVC Application exposing REST-API to Altinn Apps. The profile solution is now available locally at http://platform.altinn.cloud/profile/api/v1 and all resources are avaiable through endpoints defined below. Resources: users /users A user is the entity which is logged in in Altinn and performs actions for on behalf of an instance owner. User type Attribute Type Description UserId int user ID UserName string username set by the user PhoneNumber string phone number Email string email address PartyId int party ID Party Party party object that represents the user UserType UserType user type ProfileSettingPreference ProfileSettingPreference object containing the users profile setting preferences Operations Get information about a user from user id: »
The Receipt component is built to present receipt for all apps. Since apps over time will be removed from Altinn Apps, but the data will live forever, the Receipt component is responsible for presenting a generic receipt view. »
ER - Enhetsregisteret - Information about organisations in Norway DSF - Det Sentrale Folkeregisteret - Information about citizens in Norway. ER - Enhetsregisteret ER registeret can be used to prefill information, retrieve information based on user input or for validation of input of users. Altinn Platform does not have a own copy of ER. It currently uses Altinn II plaform as source for register. The register component is an ASP. »
Storage support storage of structured and unstructured data for apps. Apps that need the cabability to store data uses the storage service in the Altinn platform to store both metadata and actual data. Metadata Stored in Azure Cosmos Db. Formdata and attachments Stored in Azure Blob Storage. One storage account for each application owner. Additional details { "id": "test/sailor", "versionId": "v32.23-xyp", "org": "test", "app": "sailor", "created": "2019-03-06T13:46:48.6882148+01:00", "createdBy": "XXX", "title": { "nb": "Testapplikasjon", "en": "Test Application" }, "processId": "standard", "validFrom": "2019-04-01T12:14:22+01:00", "validTo": null, "maxSize": null, "dataTypes": [ { "id": "boatdata", "description": {"nb": "Båtdata", "en": "Boat data"}, "allowedContentTypes": ["application/json"], "taskId": "Task_1", "appLogic": { "autoCreate": true, "classRef": "Skjema", "schemaRef": "schemas/boatname" }, "maxSize": 200000, "maxCount": 1 }, { "id": "crewlist", "allowedContentTypes": ["application/xml"], "taskId": "Task_2", "appLogic": { "autoCreate": false, "classRef": "CrewList", "schemaRef": "schemas/crewlist" }, "maxSize": null, "minCount": 1, "maxCount": 3 }, { "id": "certificate", "allowedContentType": ["application/pdf"], "appLogic": null, "maxSize": null, "maxCount": 1 } ] } Application type Property Type Description id string application id versionId string release or commit id processId string application process id title LanguageString[] application title in different languages validFrom dateTime when the application is valid from validTo dateTime? »
Authenticaiton Events Loging of authentication events is described here Authorization Events »
