Breaking Change: itsme Login Handling for Users Without a National Identification Number
Effective date: Immediately
Overview
We have introduced a change to how itsme login integrations handle users whose national identification number (idcode) is not provided by itsme.
Itsme currently provides national identification numbers for users from the following countries: Belgium (BE), Romania (RO), Bulgaria (BG), Czechia (CZ), Slovakia (SK), Croatia (HR), Lithuania (LT), Slovenia (SI), Latvia (LV), and Malta (MT).
For users outside these countries, itsme does not provide a national identification number.
What Has Changed?
By default, if itsme does not return a national identification number, the login flow will fail with the following error:
This user does not have a valid id_code.
This error may occur during the itsme callback (before an authorization code is returned) or when retrieving user data.
This safeguard prevents potential account-matching issues in integrations that rely on idcode to identify users.
Action Required
If your integration supports users without a national identification number, you can enable a setting to allow the login flow to complete without an idcode.
- Log in to the eID Easy admin portal: Staging or Production.
- Navigate to My Webpages.
- Find the relevant OAuth
client_idand click EDIT. - Enable Allow itsme login without an ID code.
- Click Save changes.
This setting must be enabled separately for each applicable OAuth client_id.
Important Considerations
When this setting is enabled, itsme login can complete even if no national identification number is provided. In such cases, user data may contain:
"idcode": null
Before enabling this option, ensure your integration can safely handle a missing idcode, particularly when creating user accounts, matching existing users, and authenticating users.
If your integration requires idcode, leave the setting disabled and ensure your application handles the error appropriately.