BankID — Phone auth & sign
Authenticate or sign over a phone channel for users without QR access.
When the user can't scan a QR (call-center flows, voice-only channels), use the phone endpoints. The user receives a push directly to their BankID app, scoped to a personnummer the agent enters.
Phone auth
curl -X POST https://sandbox-api.cerrtify.com/service/bankid/phone/auth \
-H "X-API-Key: cert_..." \
-H "Content-Type: application/json" \
-d '{
"personalNumber": "190000000000",
"callInitiator": "user",
"userVisibleData": "Sign in to Acme over phone"
}'callInitiator is either user (the customer initiated the call) or RP (you initiated). BankID enforces this for compliance — get it right.
Phone sign
curl -X POST https://sandbox-api.cerrtify.com/service/bankid/phone/sign \
-H "X-API-Key: cert_..." \
-H "Content-Type: application/json" \
-d '{
"personalNumber": "190000000000",
"callInitiator": "user",
"userVisibleData": "Approve the transfer of 500 SEK"
}'Collect
Same /service/bankid/collect endpoint as the QR flows.