Important information about domain change in production

Scheduled Maintenance Report for BankID Services

Completed

We are happy to inform that the new domains for BankID OIDC are now available.

Merchants must update their applications and network configurations to use the new domains by 31st of August but are advised to do so as soon as possible.

The new OpenID Configuration URL can be found at https://auth.bankid.no/auth/realms/prod/.well-known/openid-configuration and contains information about the new issuer and endpoints:
- issuer: https://auth.bankid.no/auth/realms/prod
- authorization_endpoint: https://auth.bankid.no/auth/realms/prod/precheck/auth
- token_endpoint: https://auth.bankid.no/auth/realms/prod/protocol/openid-connect/token
- userinfo_endpoint: https://userinfo.bankid.no/userinfo
- jwks_uri: https://auth.bankid.no/auth/realms/prod/protocol/openid-connect/certs
- jwks_uri_enc: https://auth.bankid.no/auth/realms/prod/encryption/keys

Please note that the domains used by the SignDoc, AML, Operational Status and Fraud Data services have not been changed, but the token endpoint used to retrieve access tokens to these services must be updated.

Even if an application has not been updated, end-users are now redirected to https://login.bankid.no for authentication and signing and to https://userinfo.bankid.no for consent. These URLs more user friendly than the old ones and will therefore improve the user experience.

If you have any questions or feedback regarding this change, please contact your partner contact or BankID support.

Posted Aug 11, 2021 - 11:39 CEST

Verifying

Verification is currently underway for the maintenance items.

Posted Aug 10, 2021 - 18:47 CEST

In progress

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Posted Aug 10, 2021 - 08:00 CEST

Scheduled

Important: Domain change in production may affect services and may require action by merchants. Please read this information carefully.

The new domains will be available in production from 11th of August 2021. Merchants must have updated their applications by the 31st of August

Based on the feedback we have received from merchants, we have decided to change our domain change strategy to better accommodate their needs.

BankID OIDC will be available on the new domain (bankid.no) alongside the present domain from 11th to the 31st of August*. There will be no redirects from the old to the new domain.
This should provide time for merchants to update their application and network configurations to point to the new domain.

Merchants may expect some downtime (a couple seconds) during the maintenance on the 10th and 11th of August, but should not experience any extended downtime due to the change.

The issuer in requested ID and Access tokens and the URLs defined by the OpenID configuration endpoint will not be changed until merchants update their configuration to point to the new domain. It will not be possible to reissue access tokens from refresh tokens issued by the old domain when pointing to the new domain.

The following changes are planned for our BankID OIDC production environment:
- OpenID Connect Authorization Server: https://oidc.bankidapis.no → https://auth.bankid.no
---- OpenID Configuration URL: https://oidc.bankidapis.no/auth/realms/prod/.well-known/openid-configuration → https://auth.bankid.no/auth/realms/prod/.well-known/openid-configuration
----Issuer: https://oidc.bankidapis.no/auth/realms/prod → https://auth.bankid.no/auth/realms/prod
- Userinfo Service: https://tinfo.bankidapis.no -> https://userinfo.bankid.no
- Identity Provider Service: https://oidc-ui.bankidnorge.no → https://login.bankid.no (and eventually https://sign.bankid.no for signing request)*

*Note that the Identity Provider Service will not support the old domain, but this should not be an issue as merchants does not interact with this service directly.

Please follow this status page to receive updated information. If you have any questions or feedback regarding this change, please contact your partner contact or BankID support

Posted Jun 23, 2021 - 14:15 CEST

This scheduled maintenance affected: OIDC Authentication (BankID, BankID on mobile), OIDC Signing (BankID, BankID on mobile), and OIDC Authorization.