Re-using identifications to sign documents
If your account is eSign-enabled and is using Namirial, it is possible to store identification data and re-use it later to avoid a going through a whole new identification process.
To be able to do so, a two-step approach is used:
-
Retrieve and store a signed version of the identification data
-
Provide this identification data when placing a new order for the same user
To retrieve the signed version of the identification data you need to call the "Signed"-variant of getIdentData (getIdentData/[OrderID]/Signed) as described in Retrieving Identification Results (JSON) and store the result body.
When you now want to sign a document and re-use the identification, you provide the stored data in the element IdentDataSigned inside the body of the putOrder call.
Before re-using the given data, it will be checked, if
-
It has not been tampered and is signed correctly,
-
The given data is sufficient to be used for signing purposes,
-
The identity document used for the identification is still valid.
In case the data is considered valid for signing purposes, the user will immediately be redirected to the signing process without a further identification, otherwise the user will be re-identified.