OpenID Connect

Sumsub ID supports OpenID Connect (OIDC), which allows you to authenticate verified users using Sumsub ID.

Implementation details

  • Issuer: https://id.sumsub.com/
  • Configuration URL: https://id.sumsub.com/.well-known/openid-configuration

The OpenID Connect discovery protocol allows you to automatically configure OIDC integrations using the metadata provided at the configuration URL.

Configuration metadata

The configuration contains metadata describing:

  • Authorization and token endpoints.
  • Userinfo endpoint.
  • Supported scopes, response types, and grant types.
  • Public keys for ID token validation.

Supported scopes

The following table describes the supported scope values—permissions that grant access to specific actions within Sumsub ID Connect—used in the following request.

ScopeDescription
openidReturns the ID token (id_token). Required by OpenID Connect.
profileGrants access to the user’s basic profile information.
emailGrants access to the user’s email address.
nameGrants access to the user’s name information.
shareGrants permission to generate a Sumsub ID Share token.
offline_accessGrants permission to obtain a refresh_token.

Setup

To enable and use OpenID Connect, complete the following steps in the Dashboard:

  1. Navigate to Reusable IdentitySumsub ID Connect.
  2. Generate a secret key and register a redirect URL.
  3. Save changes.