What is Maskinporten?

Maskinporten and Altinn are national common components developed and operated by the Norwegian Digitalisation Agency (Digitaliseringsdirektoratet - Digdir). Together, they aim to facilitate the sharing and utilization of data across systems. These solutions ensure the verification of the identity of businesses and provide them with the appropriate access to data offered by public entities through interfaces. A prerequisite for using Maskinporten and Altinn is that the organization is registered in the Norwegian Business Registry (Enhetsregisteret) with a Norwegian organization number.

Maskinporten is a solution provided by the Norwegian Digitalisation Agency (Digdir) for access management for businesses that exchange data. The solution ensures identity assurance between organizations and provides authentication for machine-to-machine communication. It enables the integration of systems and the development of new services in an efficient manner.

In the future: Altinn (authorization) will allow for the delegation of rights to other organizations or individuals. This delegation is based on registered roles in the Norwegian Business Registry (Enhetsregisteret). This is not yet implemented.

Maskinporten ensures secure authentication and access control for data exchange between businesses. The solution guarantees the identity between organizations and enables the integration of systems and development of new services in an efficient manner.

Operations and monitoring

Maskinporten aims to maintain an uptime of 99.9% and, in case of any deviations, it rarely experiences downtime exceeding 5 minutes. Therefore, we recommend that our clients implement a retry mechanism to try again if messages are rejected without clear error messages.

We further recommend monitoring both planned and unplanned operational disruptions:

• Digdir Status - History at https://status.digdir.no/

It is also possible to verify if Maskinporten is up by using the links below:

• https://oidc.difi.no/idporten-oidc-provider/health

• https://maskinporten.no/health

What is needed to use Maskinporten?

Prerequisite: Norwegian organization number

It is a prerequisite for using Maskinporten that you are registered in the Norwegian Central Coordinating Register of Legal Entities (Enhetsregisteret) with a Norwegian organization number.

1. Acquire a company certificate for testing and production purpose

Digdir will validate your signature against your organization's certificate issued by a recognized certificate provider. Find more documentation on this processat Digdir.

Here are some options for acquiring an organization certificate:

• https://www.commfides.com/commfides-virksomhetssertifikat/

• https://www.buypass.no/produkter/ virksomhetssertifikat-esegl

2. Become a customer of Digdir for access to the collaboration portal

Contact Digdir via servicedesk@digdir.no

3. Register for access with Norwegian Customs

The registration form can be found here: Registration: Digitoll-actor - Norwegian Customs

Norwegian Customs provides access to the scopes needed for the relevant integration, see overview below.

4. Create an integration with Digdir and connect it to Norwegian Customs' API (scope)

Log in to Collaboration Portal (digdir.no)

• Difi-service = Maskinporten
• Add scopes – see overview of our scopes below
• Integration identifier: This is what should be set in the "iss" field of your JWT sent to Difi (cf. section below).
• Name of the integration: You are free to choose what the integration with Norwegian Customs should be called.
  It may be beneficial to give a name that distinguishes between different services and APIs for Norwegian Customs, as we have several different APIs.
• Grant-types: We currently use urn:ietf:params:oauth:grant-type:jwt-bearer, this may change in the future.

4.1 Go to self-service for integrations

To manage integrations for testing: Select "Integrations" under the heading "Ver 2"

To manage integrations for production: Select "Integrations" under the heading "Production"

4.2 Create an integration in the Test environment at Digdir

4.3 Create an integration in PRODUCTION at Digdir

4.4 New integration

{
  "issued_token_type": "access_token",
  "access_token": "<TOLL ACCESS TOKEN HERE>",
  "token_type": "Bearer",
  "expires_in": 970
}