Federation and metadata
To join the Sandbox OpenID Federation, first request to have one or more administrators appointed for your organization by sending an email to swedenconnect@digg.se. Then log in to the Sandbox portal, where you register one or more Entities.
All settings needed to operate within the federation are documented in OpenID Federation Settings.
OpenID Providers
By adding an OIDC Relying Party to the Sandbox federation you can test your service against all OpenID Providers in the federation. Below is a listing of the official reference implementations for the Sweden Connect Technical Framework:
Sweden Connect Reference OpenID Provider
- Entity Identifier
- https://converter.sandbox.swedenconnect.se/proxy/realms/SwedenConnectSandboxReferenceIdP
eIDAS Connector OP for test
- Entity Identifier
- https://converter.sandbox.swedenconnect.se/proxy/realms/ForeigneID
These providers are currently proxy services in front of the corresponding SAML Identity Providers. Native OpenID Providers will be introduced later.
Test Support for OPs
The Sweden Connect Test Client is a tool that acts as an OpenID Connect Relying Party, so you can exercise your OpenID Provider from the other side of the protocol.
An authentication request is assembled as a set of parameters that can be edited freely before anything is sent, so you can deliberately produce requests a compliant Relying Party would refuse to build. When the user returns, the response is decoded, its signature and contents are validated, and everything is presented as it was received. The tool supports OpenID Federation on the consumer side: OpenID Providers are discovered through subordinate listings and configured from the metadata returned by a trust anchor's resolve endpoint, so no manual configuration is needed to test against them.