Scopes

Scopes define the level of access a Relying Party (RP) is requesting from Corppass during an authorization request. Each scope corresponds to a specific set of claims or datasets that the RP may access.

Once the user authorises the request, the claims associated with the requested scopes are returned either in ID token (via the Token Endpoint) and/or through the Userinfo Endpoint, depending on the type of digital service application.

Usage

When initiating an authorization request via , RPs specify the required scopes in the scope parameter. Multiple scopes are space-separated.

Example:

scope=openid authinfo user.identity entity.identity entity.basic_profile.name

Refer to Pushed Authorization Request (PAR) for detailed specifications on constructing the request.

Available Scopes

Scope Category	Description
Standard Scopes	Corppass standard scopes provide access to identity information about the transacting user, and the entity that the user is transacting on behalf of. These include: Protocol scopes. Authorization scopes, providing access to authorization details about the transacting user. Entity profile scopes, providing access to profile information about the entity that the user is transacting on behalf of. User profile scopes, providing access to profile information about the transacting user. Available to all Corppass applications.
Myinfo Business Scopes	Myinfo Business scopes provide access to entity and personal information about the acting user and the entity they represent. These include: Entity scopes, providing access to business-related information about the entity the user is transacting on behalf of. Person scopes, providing access to personal information about the transacting user. Corppass scopes, providing access to information about the transacting user's Corppass account. Available to only Myinfo Business applications.