Fortified ID
Fortified ID
Svenska
PartnersContact
Book demoProducts

Access

Secure login, MFA and Single Sign-On

Fortified ID Access combines Single Sign-On with a broad range of multifactor authentication methods to create simple and secure access to applications and services.

With support for SAML, OpenID Connect, LDAP, JDBC and REST API, the solution fits cloud, on-premises and hybrid IT environments.

MethodsArchitectureTech spec
IntegrityAccess

Popular secure methods

Access brings together BankID, Freja, SITHS, Passkey and SverigeID through Sweden Connect, alongside other secure methods. IDombud adds identity management.

Which methods are presented can be controlled by context, role, group, application and security requirements.

Government agenciesRegionsMunicipalitiesUniversitiesEnergy companiesPrivate sectorPrivate sector
PasskeyPasswordless authentication based on modern FIDO technology. Reduces phishing risk and makes login faster for end users.
eIDASEuropean identity federation for cross-border login. Supports users with approved eIDs from other EU countries.
EFOSFederated login for public-sector and healthcare-adjacent environments where multiple organizations need shared trust requirements.
CertificateCertificate-based authentication for users, devices and services. A good fit where strong technical trust is required.
AuthenticatorSupport for Microsoft Authenticator and similar app-based MFA flows, combined with policies and conditional access.
SkolfederationFederated access for schools and education, helping students, staff and services meet in established trust models.
OTPOne-time passwords for MFA when app, certificate or eID is not the right path. Can be delivered through several channels.
Sweden ConnectNational framework for secure digital identification, relevant for organizations connecting to Swedish eID infrastructure.
SambiFederation for healthcare and care services. Supports secure access between actors with shared identity and trust rules.
GoogleSocial or organization-based login with Google. Useful for external users, partners and simpler onboarding.
YubiKeyPhysical security key for strong, phishing-resistant authentication. Especially useful for administrators and sensitive roles.
ID-portenNorwegian identity platform for public digital services, enabling Nordic access scenarios in the same architecture.

Authentication method

BankID

BankID gives users a familiar way to sign in securely. Fortified ID Access lets you use BankID directly in your sign-in flows, even when your existing identity platform has no native support for it.

Explore BankID

BankID directly in Access

Access has a built-in BankID authenticator. The user identifies themselves in the BankID app, and Access completes sign-in to the application without routing the flow through a separate external IdP or broker.

Extend your existing environment

Access can be your organization’s IdP or add BankID to a platform you already use. This gives you a way to introduce BankID for:

  • internal business systems and portals
  • Microsoft Entra ID and Google Workspace
  • ServiceNow and other connected applications
  • environments that still use ADFS

Also for password reset

BankID can verify a user’s identity before a password is reset with Fortified ID Password Reset.

BankID agreements through Fortified ID

Customers can sign a BankID agreement through us. Fortified ID resells BankID certificates and provides one point of contact for connection and integration.

Talk to us about BankIDRead the technical use case (Swedish)

Authentication method

Freja

Freja eID provides secure personal identification, while Freja OrgID connects sign-in to an organization and professional role. Fortified ID lets you offer Freja alongside your other methods in one access solution.

Explore Freja

Freja in your sign-in flows

Freja can be used in applications, portals and federated flows. The available methods can reflect the service, user role and security requirements.

OrgID for professional roles

A person with Freja eID can add one or more organizational eIDs. This makes it possible to identify themselves at work without using a private eID for their professional role.

An identity that follows the role

Fortified ID can support the assignment and removal of Freja OrgID through self-service, delegated administration or automated flows. Freja can be offered alongside BankID in the same sign-in solution.

Talk to us about Freja

Authentication method

SITHS

SITHS is used in healthcare, care services and the public sector for secure identification and sign-in. Fortified ID Access lets you use SITHS in your existing identity flows and connected services.

Fits your identity environment

Access can be your primary identity provider or complement a platform you already use. It brings authentication and federation together while allowing you to introduce SITHS step by step.

Several ways to integrate

The right approach depends on your applications and how you use SITHS today. Access can:

  • act as a SAML IdP or OpenID Provider with SITHS as a sign-in method
  • work as a broker or IdP proxy towards Inera
  • validate SITHS certificates locally with mTLS where needed
  • complement an existing ADFS environment through Fortified ID’s MFA adapter

The right assignment follows the user

Access can enrich the authenticated identity with employee assignments and information from HSA, Active Directory, Entra ID or other business systems. The relevant information can then be passed on to the service the user needs.

Talk to us about SITHSRead the technical use case

Identity management

IDombud

IDombud brings eIDs, verifiable identities and service identities into one lifecycle. The platform helps organizations manage digital representation and delegated access with clear traceability.

Explore IDombud

Digital representation

Representatives, guardians and other authorized people can act on behalf of someone else. The delegation can show its validity and current status.

The right assurance for each case

IDombud can support different assurance levels based on the service requirements and your organization’s process. This makes delegated flows easier to govern and review.

Identity across its lifecycle

Permissions and delegations need to be created, changed and ended. IDombud provides a shared foundation for this in digital access flows.

Talk to us about IDombud

Integration complete

SverigeID

Offer SverigeID sign-in through Sweden Connect. Fortified ID Access supports OpenID Connect and OpenID Federation and handles federation connectivity and SverigeID sign-in.

Explore SverigeID

For municipalities, regions and government agencies

Introduce SverigeID in your digital services while continuing to use existing applications and sign-in solutions. Access brings support together, so you do not need a separate SverigeID integration in every application.

Reuse your application integrations

Access connects to Sweden Connect’s OIDC federation and passes the user’s identity to connected applications through protocols such as SAML or OIDC.

Coordinate sign-in and access

Offer SverigeID alongside other sign-in methods while retaining control over sign-in flows, identity information and access requirements.

Talk to us about SverigeID

Existing identity platform

ADFS

Keep ADFS as your central identity provider and add modern MFA methods and eIDs through Fortified ID. You can improve sign-in without replacing an existing ADFS environment.

Explore ADFS

Several eIDs in one environment

Access can act as a federated authentication layer for ADFS. BankID, Freja, SITHS and EFOS can be offered where user groups need different methods.

One shared integration

Fortified ID’s ADFS adapter brings method logic and external eIDs together behind one integration with ADFS. This simplifies management when several methods are used in parallel.

Control and traceability

Method selection, assurance levels and attributes can be managed consistently, so sign-in reflects the service requirements and can be reviewed.

Talk to us about ADFS
Act as IdP, broker or proxy

Architecture

Act as IdP, broker or proxy

Access can act as SAML IdP, SAML SP, SAML broker, OIDC OP or OIDC RP. That makes it useful both as a central IdP and as a complement to existing identity platforms.

  • SAML and OIDC in one platform
  • Proxy functions between protocols
  • Support for requirement-driven login flows
One login for many services

Single Sign-On

One login for many services

Users get a consistent and secure login experience while the organization keeps control over method requirements, sessions and permissions.

  • SSO for modern and legacy applications
  • ID mapping between directories and apps
  • Ticket translation and federation support

Technical specification

Access is built for modern authentication flows, federations and secure access to both internal and external applications.

Read more in our technical documentation.

Download PDF

Methods

BankID
Freja eID Plus
Freja OrgID
eIDAS
EFOS
X.509 Certificate
SAML Broker
Swedish passports
SITHS eID
SITHS
NetID
Sambi
Skolfederation
SWAMID
OTP
Telia eID
Passkey
Google
Azure
ADFS
Suomi.fi
FIN eID smart card
ID-porten
Common smart card

Standards

SAML 2.0
OIDC
ADFS
Custom API
OAuth
FIDO2
Sambi
Sweden Connect

Features

SSO
MFA
IdP Broker
Shared sessions
ID mapping
Ticket translation
WCAG / Accessibility
SIEM ready
Custom branding
Configuration as code
HSM
Sweden Connect (LOA 4)

Installation

Docker
Windows
GCP
AWS
Linux
Azure

Integrations

Google
ServiceNow
Citrix
AWS
Azure
Office 365
Skolfederation
Dropbox
VMware
Tieto Edu
Exchange
Box
RDP
Visma
Wordpress
Aweria
Cambio
Zoom
IST
Nginx
OracleSAP
TDialogEntra
SambiSambi
ApacheApache

Videos

eID login to Microsoft Entra ID

Digital National Tests with eID

Self enrollment of hardware and software tokens

Password Reset with BankID

From our LinkedIn

Fortified ID · LinkedIn

YubiKey 5.8 in IDombud

Hardware-backed passkeys provide a practical way to strengthen sign-in. Here we discuss support for YubiKey 5.8 in IDombud and using security keys with FIDO2.

Read the post on LinkedIn

Original post in Swedish.

Contact

Want to know more?

Tell us what you want to solve and we will get back to you with the next step.

We only use your details to respond to your request.