Technical documentation for implementation of mojeID

Edition: 3.0

• Legal Notice

Tree of Content

• 1. Introduction
• 2. Terminology
• 3. Getting started with mojeID
  • 3.1. Basics of mojeID
  • 3.2. MojeID Identity
  • 3.3. Communication with mojeID
    • 3.3.1. Communication via OpenID Connect
    • 3.3.2. Communication via OpenID 2.0
  • 3.4. Favicon
    • 3.4.1. Settings in OpenID Connect
    • 3.4.2. Settings for OpenID 2.0 and SAML
• 4. mojeID Support Implementation
  • 4.1. Implementation via OpenID Connect (OIDC)
    • 4.1.1. Overview of Libraries and Modules
    • 4.1.2. Implementation Process Overview
    • 4.1.3. Client Registration
    • 4.1.4. Requesting Login via mojeID
    • 4.1.5. Initiation
    • 4.1.6. Requesting Identity Authentication
    • 4.1.7. Performing Authentication
    • 4.1.8. Response to Authentication
    • 4.1.9. Requesting Token
    • 4.1.10. Requesting Data
    • 4.1.11. mojeID LITE Library
  • 4.2. Implementation via OpenID 2.0
    • 4.2.1. Overview of Libraries and Modules
    • 4.2.2. Establishing Association
    • 4.2.3. Requesting Login via mojeID
    • 4.2.4. Initiation
    • 4.2.5. Requesting Identity Authentication
    • 4.2.6. Performing Authentication (XRDS and realm)
    • 4.2.7. Response with the Identity Authentication Outcome
    • 4.2.8. Response Verification
    • 4.2.9. Response Processing
  • 4.3. Implementation via SAML
  • 4.4. Problems with Implementation
    • 4.4.1. Differences Between the Protocols
    • 4.4.2. Transition to a Different Protocol
    • 4.4.3. Adjusting Communication with mojeID Server
• 5. Interface for Creating mojeID Accounts
  • 5.1. Requesting Creation of a mojeID Account
  • 5.2. Checking Data Validity
  • 5.3. Completing Registration
• 6. Logging out of mojeID
• 7. mojeID Test Instance
  • 7.1. Test Accounts
  • 7.2. Mutual Endpoints
  • 7.3. OpenID Connect
  • 7.4. OpenID 2.0
  • 7.5. SAML
• 8. Appendices
  • 8.1. Appendix 1 – List of Data to be Handed Over (OpenID Connect)
  • 8.2. Appendix 2 – List of Data to be Handed Over (OpenID 2.0)
  • 8.3. Appendix 3 – List of Data to be Handed Over (SAML)
  • 8.4. Appendix 4 – List of Data to be Handed Over (SAML specs.nic.cz)
  • 8.5. Appendix 5 – List of Data for Registration
  • 8.6. Appendix 6 – Examples and Solution of Error Messages
    • 8.6.1. Error Messages on Test Instance
    • 8.6.2. Problems Verifying the Return Address
    • 8.6.3. Problems with Unencrypted Connection
    • 8.6.4. Selecting Required Logging Method
    • 8.6.5. Problems with Library for PHP
    • 8.6.6. Error Messages in JSON (OIDC)
  • 8.7. Appendix 7 – Correct Implementation Procedure
• 9. Record of Changes