Overview

The eKey 2.0 Integration for OutSystems component enables seamless integration with Bahrain’s national digital identity platform, eKey v2.0, developed by Beyon Connect in collaboration with the Information & eGovernment Authority (iGA). This component supports secure authentication, KYC data retrieval, and enhanced security features such as biometric verification, enabling private and semi-government entities to offer trusted digital services.

Key Features

• ?? OpenID Connect (OIDC) Authentication with support for Authorization Code Flow and PKCE
• ?? App-to-App Authentication for native mobile applications
• ?? Long-Term Sessions with refresh token support (up to 90 days)
• ?? Enhanced Security Authentication (ESA) with biometric verification
• ?? KYC Data Retrieval via secure API calls
• ?? Support for Multiple Scopes including openid, profile, id-bhr, ekyc-bhr-*, and more
• ?? Integration with eKey-B Test Tools for simulation and testing

Use Cases

• Secure login for web and mobile apps using national identity
• Fetching verified user data (e.g., CPR, name, nationality, employment status)
• Implementing biometric-based step-up authentication
• Reducing authentication costs via long-term sessions and token reuse

Technical Details

• Platform: OutSystems 11+
• Integration Protocol: OpenID Connect (OIDC) over OAuth 2.0
• Mobile Support: Yes (iOS & Android)
• Web Support: Yes
• Dependencies: None (uses standard HTTP and JSON handling)

How to Use

1. Register your application with Beyon Connect to obtain Client ID and Client Secret.
2. Configure scopes based on your data access needs (e.g., openid, profile, ekyc-bhr-*).
3. Use the provided actions to initiate authentication, handle token exchange, and retrieve user data.
4. Implement app-to-app login using WebView and custom URL schemes for mobile apps.
5. Use refresh tokens to maintain long-term sessions and reduce authentication costs.