Suomi.fi e-Identification –
Attributes transmitted on an eIDAS-identified user

The main difference between the users of elDAS identification and Finnish tokens is that the Finnish personal identify code of elDAS-identified users is not returned. The returned personal identifier may differ significantly from the Finnish personal identity code and fully elDAS-capable e-services should be prepared for this.
No Population Information System data on the user can be transmitted in connection with elDAS identification. However, the basic data (listed in the table below) is transmitted on all users. The e-service does not require a data access authorisation for disclosing this data.

The unique identifier as laid down in the elDAS regulation. For more information, see below. The unique identifier is not transmitted if a Finnish token has been used

Data Description URI FriendlyName SAML2 example
First names Current first names.

The same attribute is used for Finnish persons and tokens.

http://eidas.europa.eu/attributes/naturalperson/CurrentGivenName FirstName
http://eidas.europa.eu/attributes/naturalperson/CurrentGivenName"
 NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
 >
 http://www.w3.org/2001/XMLSchema-instance"
 xsi:type="eidas-natural:CurrentGivenNameType"
 >Pär
Family name Current family name. The family name of a Finnish person is not transmitted in this attribute if a Finnish token has been used. http://eidas.europa.eu/attributes/naturalperson/CurrentFamilyName FamilyName
http://eidas.europa.eu/attributes/naturalperson/CurrentFamilyName"
 NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
 >
 http://www.w3.org/2001/XMLSchema-instance"
 xsi:type="eidas-natural:CurrentFamilyNameType"
 >Kiwi
Date of birth The date of birth is given as xsd:date , YYYY + ‘-’ + MM + ‘-’ + DD. The date of birth of a Finnish person is not transmitted in this attribute if a Finnish token has been used. http://eidas.europa.eu/attributes/naturalperson/DateOfBirth DateOfBirth

1978-09-05
PersonalIdentifier The unique identifier as laid down in the elDAS regulation. For more information, see below. The unique identifier is not transmitted if a Finnish token has been used. http://eidas.europa.eu/attributes/naturalperson/PersonIdentifier PersonIdentifier

CX/FI/35092322

Unique personal identifier in elDAS identification

The unique Person Identifier (PID) is used in elDAS identification. The identifier is country-specific and no general conclusions about its structure can be made on the basis of national practices. For example, the date of birth is not shown in identifiers in all countries. Not all elDAS countries have a Finnish-type centralised population information system and the identifier may be linked to the token (such as the document number of the personal identity card) and it may change when the token is replaced. Furthermore, there are no specific limits to the length of the PID identifier, which must be taken into account in the software used for processing the identifier.

However, with elDAS, these conditions are met:

  •  The person has been identified with strong authentication
  •  The token used meets all elDAS notification requirements for the assurance level in question
  •  The Person Identifier is unique (the same identifier cannot be used by anybody else)