Enable eIDAS login

This page contains information on how to configure the acceptance of eIDAS digital identities through the interconnection with the Italian eIDAS-Node managed by AGID. The procedures to be followed are both technical and administrative, and all communication will take place through the dedicated support system and via the e-mail address indicated below. The Notice no. 01-2018 “Notes for the deployment of the EIDAS LOGIN in Public Administrations” constitutes an operational reference for the configuration of systems related to public administrations as Service Providers of the Public Digital Identity System (SPID) within elDAS.

Index

Index

Technical and administrative procedure

Technical and administrative procedure

The Italian eIDAS-Node operates as a virtual SPID Identity Provider (IdP), so the impact on the configuration activities of the service provider joining the SPID system is minimal. To activate the eIDAS login:

  1. Submit the communication

    Request federation in a Quality Assurance environment by sending an e-mail to servicedeskeidas@agid.gov.it with the following data:

    • Name of the Organisation
    • URL of the metadata
    • URL of the page containing “Login with eIDAS”
    • Name, surname and email of the administrative contact person
    • Name, surname and email of the technical contact person
    • List of services with access via “Login with eIDAS”.

  2. Request federation in the production environment

    Once the federation in the Quality Assurance environment has been completed, it is possible to request federation in the Production environment by sending an email to the same address, attaching a copy of the SPID membership agreement.

Are you a SPID Service Provider?

Are you a SPID Service Provider?

The metadata of the SPID IdP exposed by the eIDAS-Node are:

  1. Production

     

    ComponentSP-Proxy IDP-IT
    Metadata URLhttps://sp-proxy.eid.gov.it/metadata
    Metadata Signing CertificateMetadata Signing Certificate OLD (current, expires Nov 1st)

    Metadata Signing Certificate NEW (next, deploy Oct 29th)
    Certificate fingerprintSHA256 (OLD)
    D6:21:19:7C:1A:80:C9:AA:E8:87:51:4E:40:BD:7B:3D:70:92:64:D2:98:3D:71:D9:62:CA:BF:A0:65:0C:75:C8 (current, expires Nov 1st)

    SHA256 (NEW)
    54a3e7c2c5bbad07da0415371a9a787c91e54f5cf429a67472b2249f600f220e (next, deploy Oct 29th)

  2. QA (Quality Assurance)

     

    ComponentSP-Proxy IDP-IT
    Metadata URLhttps://sp-proxy.pre.eid.gov.it/spproxy/idpitmetadata
    Metadata Signing CertificateMetadata Signing Certificate OLD (current, expires Nov 1st)

    Metadata Signing Certificate NEW (next, deploy Oct 29th)
    Certificate fingerprintSHA256 (OLD)
    3C:C8:20:77:21:14:9D:23:52:2D:42:85:79:5B:D7:00:82:F3:03:43:2F:78:21:E0:46:79:43:87:94:A2:87:DC (current, expires Nov 1st)

    SHA256 (NEW)
    a9b0c44802ad5509ba0c20f8b37c5af4f9d0c9fce170a00204f792154abfa789 (next, deploy Oct 29th)

     

    For the production environment, it is also possible to use the aggregated metadata of all the IdPs available at: https://registry.spid.gov.it/metadata/idp/spid-entities-idps.xml

Are you a SPID Identity Provider?

Are you a SPID Identity Provider?

The metadata of the SPID IdP exposed by the eIDAS-Node are:

  1. Production

     

    ComponentSP-Proxy IDP-IT
    Metadata URLhttps://idp-proxy.eid.gov.it/metadata
    Metadata Signing CertificateMetadata Signing Certificate OLD (current, expires Nov 1st)

    Metadata Signing Certificate NEW (next, deploy Oct 29th)
    Certificate fingerprintSHA256 (OLD)
    D6:38:1D:2A:DD:65:84:57:AB:01:56:76:30:5D:DE:A5:51:43:38:DD:A3:BE:D3:0A:84:BA:89:D4:21:DA:9B:91 (current, expires Nov 1st)

    SHA256 (NEW)
    cb7cb43ec27c0ee8858d3d202565ca6ad1731ebf492a383142904966a0420fef (next, deploy Oct 29th)

  2. QA (Quality Assurance)

     

    ComponentSP-Proxy IDP-IT
    Metadata URLhttps://idp-proxy.pre.eid.gov.it/metadata
    Metadata Signing CertificateMetadata Signing Certificate OLD (current, expires Nov 1st)

    Metadata Signing Certificate NEW (next, deploy Oct 29th)
    Certificate fingerprintSHA256 (OLD)
    C6:E6:F5:2D:DA:FE:C7:06:09:DE:F5:9E:39:67:96:A9:4C:33:30:34:21:7B:E0:74:A6:38:AD:E3:87:F3:06:22 (current, expires Nov 1st)

    SHA256 (NEW) 
    2472791513cc93e5182a008f3eee97414bfbd0cbb7f59057bdb84367289a7c63 (next, deploy Oct 29th)

Technical and administrative support

Technical and administrative support

If you need support to adapt your systems to eIDAS Login, you can send an e-mail to: servicedeskeidas@agid.gov.it