OIDC or REST API: which should I use?
OIDC or REST API: which should I use?
OIDC if you want Hopae to host the verification screens (fastest). REST if you need your own UI. See Choose an Integration.
Where are my credentials?
Where are my credentials?
Developers → API Settings of the app: the App ID and App Secret. Sandbox and production apps have separate credentials. See Authentication.
How do I switch between sandbox and production?
How do I switch between sandbox and production?
Use the other app’s credentials. The URLs are the same. See Apps & Environments.
What is a connection?
What is a connection?
One credential through one provider, such as Smart-ID or a US mDL in Google Wallet. See Connections.
How long does activation take?
How long does activation take?
Direct: immediately. Registration: a provider review in production, instant in Sandbox. Contract: after an onboarding call. See Activate Connections.
A connection shows N/A.
A connection shows N/A.
It is not available for this app’s environment, for example a production-only connection in a sandbox app.
The hosted page offers no connections.
The hosted page offers no connections.
Activate a connection and enable it in the workflow you run. See Workflows.
How do I choose the data I receive?
How do I choose the data I receive?
On the workflow’s Claims tab. See Workflows.
How do I recognise a returning user?
How do I recognise a returning user?
Tick Source ID on the workflow’s Claims tab and read
user.source_id. See Return Data.What is the difference between disclosure and match?
What is the difference between disclosure and match?
disclosure returns the user’s attributes. match confirms values you sent. See Verification Model.How do I require a minimum assurance level?
How do I require a minimum assurance level?
Send
acr_values (OIDC) or add a check-min-loa node. See Assurance.GET /verifications returns 404 for a verification I just created.
GET /verifications returns 404 for a verification I just created.
Use the credentials of the app that created it. Another app’s verification, or one past its
expiresAt, returns 404. See Expiry.How do I test without real users?
How do I test without real users?
Use a sandbox app and, where a provider needs it, request test credentials under Tester Info. See Sandbox Testing.
Is production testing billable?
Is production testing billable?
Yes. It uses real credentials and real provider traffic. See Go Live.
Is there a mobile SDK?
Is there a mobile SDK?
No. Hopae is API-first: your backend calls Hopae and your app performs the user step. See Mobile App Integration.
Can I use my own domain?
Can I use my own domain?
Yes. See Custom Domain.
How do I verify webhook signatures?
How do I verify webhook signatures?
See Webhooks.