Smart-ID

Overview

A secure mobile authentication and digital signature solution widely used in the Baltics. Boasting user counts of ~730k in Estonia, ~1,000k in Latvia, and 1,600k in Lithuania who authenticate in the Smart‑ID app with two‑step PIN or biometrics, it delivers trusted LOA3 identity and qualified signatures hundreds of millions of times per year.

ID: smart-id
Type: eID (app)
Verification Type: Presentation
Regions: Europe
Countries: BE, EE, FI, LT, LV
Adoption: 3,750,000
URL: https://www.smart-id.com/

Integration with Trinsic

Smart-ID is integrated into Trinsic's identity acceptance network, allowing businesses to easily accept Smart-ID-verified identities as part of their verification processes.

Permission required: Yes, this method requires registration before you can activate it for your users. Please contact Trinsic to begin this process.
Cost: Contact the Trinsic team.

How to Test

While using a test mode App, launch the widget or the provider directly.

Enter the credentials.
- document number: PNOLT-40504040001-MOCK-Q
At the end, you will be presented with test data for the verification session.

Direct API Requirements

📘
Direct API is not a requirement.
You can integrate with this provider using the Hosted UI instead, with no additional integration requirements on your end.

What your integration must support in order to use this provider with the Direct Provider Sessions API.

Supports Direct Provider Sessions: ✅
Launch Method: ShowContent — Display a piece of content which the user will use to launch themselves into the verification.
Collection Method: PollResult — Results arrive asynchronously; poll with the resultsAccessKey returned at session creation.
Requires Input: This provider requires input before verification can proceed.
Refreshable Step Content: This provider requires shown content to be refreshed periodically.
Trinsic-Hosted UI: A Trinsic-Hosted Fallback UI exists for this provider, which may be invoked to cover gaps in your integration's capabilities.

Outputs

ℹ️
Normalized Attributes
These attributes form part of our normalized model, a standardized set used across providers. Trinsic normalizes this for you and lets you know when a property is available for each provider.

Field	Availability	Notes
`person.givenName`	Always	-
`person.familyName`	Always	-
`person.fullName`	Sometimes	If available
`person.dateOfBirth`	Sometimes	Not available for Latvian IDs issued after July 2017
`person.sex`	Sometimes	Not available for Latvia
`document.type`	Always	-
`document.issuingCountry`	Always	-

Field	Optional	Description	Example Values
`givenName`	Yes	The given name (first name) of the individual, extracted from the Smart ID authentication certificate's Subject Distinguished Name "G" (givenName) attribute.	MARI
`familyName`	Yes	The family name (surname) of the individual, extracted from the Smart ID authentication certificate's Subject Distinguished Name "SN" (surname) attribute.	TAMM
`dateOfBirth`	Yes	The individual's date of birth, derived from the personal code. NOTE: Newer Latvian personal codes starting with "32" do not contain date of birth information.	1985-01-01
`sex`	Yes	The individual's sex, derived from the first digit of the personal code. NOTE: Not available for Latvian personal codes. Possible values: - Male - Female	Female, Male
`country`	Yes	The ISO 3166-1 alpha-2 country code extracted from the Smart ID authentication certificate's Subject Distinguished Name "C" (country) attribute. This represents the country of the certificate issuer, not the person's nationality or citizenship. For Smart ID, this will be "EE" (Estonia), "LT" (Lithuania), or "LV" (Latvia).	EE
`identityType`	Yes	The identity document type, extracted from the first 3 characters of the SERIALNUMBER field (before the country code). Possible values: - PNO: Personal Number (national civic registration number) - PAS: Passport - IDC: National identity card	PNO
`personalCode`	Yes	The personal code (Estonian: isikukood, Lithuanian: asmens kodas, Latvian: personas kods) of the individual, extracted from the SERIALNUMBER field of the Smart ID authentication certificate. This is the portion after the identity type and country prefix (e.g., "48501010014" from "PNOEE-48501010014"). Estonian and Lithuanian personal codes are 11 digits in the format GYYMMDDSSSC where: - G = century/gender (3-4 = 1900s, 5-6 = 2000s; odd = male, even = female) - YYMMDD = date of birth - SSS = sequence number - C = checksum digit Latvian personal codes use the format DDMMYY-NNNNN (6 digits, a dash, and 5 digits). See: - https://en.wikipedia.org/wiki/National_identification_number#Estonia - https://en.wikipedia.org/wiki/National_identification_number#Lithuania - https://en.wikipedia.org/wiki/National_identification_number#Latvia	48501010014
`serialNumber`	Yes	The SERIALNUMBER attribute from the Smart ID authentication certificate's Subject Distinguished Name. Format: "{'{'}identity-type{'}'}{'{'}country-code{'}'}-{'{'}identifier{'}'}" Components: - identity-type (3 chars): PNO (Personal Number), PAS (Passport), IDC (ID Card) - country-code (2 chars): ISO 3166-1 alpha-2 (EE, LT, LV) - identifier: The personal code	PNOEE-48501010014
`certificateSubject`	Yes	The full Subject Distinguished Name (Subject DN) from the Smart ID authentication certificate. Contains comma-separated RDN (Relative Distinguished Name) components including C (Country), CN (Common Name), SN (Surname), G (Given Name), and SERIALNUMBER (Personal identifier).	SERIALNUMBER=PNOEE-48501010014, G=MARI, SN=TAMM, CN="TAMM,MARI,48501010014", C=EE
`certificateLevel`	Yes	The certificate level indicating the authentication assurance level. Possible values: - QUALIFIED: Highest assurance level (eIDAS QES - Qualified Electronic Signature), legally equivalent to a handwritten signature. This is the standard production level. - ADVANCED: Lower assurance level (eIDAS AdES), also called "Smart-ID Basic". Only available in test environments for test accounts.	QUALIFIED
`documentNumber`	Yes	A unique identifier for the Smart ID account/document used for this authentication. Format: PNO{'{'}CC{'}'}-{'{'}personal-code{'}'}-{'{'}device-id{'}'}-{'{'}qualification{'}'} Components: - PNO = Personal Number (identity type) - CC = Country code (EE, LT, LV) - personal-code = The individual's personal code - device-id = Random 4-character device identifier - qualification = NQ (non-qualified) or Q (qualified certificate) This is a stable identifier that can be used to recognize returning individuals across sessions.	PNOEE-48501010014-Z1B2-Q
`interactionFlowUsed`	Yes	Indicates which interaction flow was used during the Smart ID authentication process. This reflects which of the allowedInteractionsOrder options was actually used. Possible values: - displayTextAndPIN: User saw text and entered PIN - verificationCodeChoice: User selected from multiple verification codes - confirmationMessage: User confirmed a message - confirmationMessageAndVerificationCodeChoice: Combination of both	displayTextAndPIN
`deviceIpAddress`	Yes	The IP address of the device where the Smart ID app was used for authentication. Can be IPv4 or IPv6 format.	192.168.1.100