Sandbox access request

Requested scopesEach scope links to its documentation. openid is required; sensitive scopes require a justification.

Technical scopes

Protocol behavior: OpenID Connect, delayed sharing and consent journeys.

openid
Required. Returns a standard id_token including the requested claims. Documentation ↗

private:delayed_sharing
Enables delayed sharing: the claim returns the delayed sharing API URL. See the dedicated section. Documentation ↗

private:method.qrcode
The user starts the consent through a QR code. May not be allowed for your Relying Party: the IdP then decides. Documentation ↗

private:method.identifier
The user starts the consent through a login. May not be allowed for your Relying Party. Documentation ↗

Basic scopes

Common information: profile, email, phone, address.

profile
Basic profile. This scope does not tell how the claims were verified. Documentation ↗

email
Email address. email_verified is true when it was verified by OTP. Documentation ↗

phone
Phone number. phone_number_verified is true when it was verified by OTP. Documentation ↗

address
Postal address of the user. Documentation ↗

A3BC private scopes

A3BC-specific scopes (private: prefix): verified identity, age checks, bank details, social security number.

private:person Sensitive
Base identity attributes extracted from an official identity document. Documentation ↗

private:person.insee Sensitive
Adds the INSEE codes of the birthplace and birth country to private:person. Documentation ↗

private:bankaccount Sensitive
Bank account information. Documentation ↗

private:ssn.fr Sensitive
French social security number. Documentation ↗

Document scopes

Digital copies of supporting documents verified by A3BC.

private:doc.id Sensitive
Digital copy of the identity document used to verify the base identity. Documentation ↗

private:doc.address Sensitive
Document used to verify the address. Documentation ↗

private:doc.bankaccount Sensitive
Verified bank details document. Documentation ↗

private:doc.ssn Sensitive
Document from which the social security number was extracted. Documentation ↗

private:doc.photo Sensitive
Only the user’s picture (matched with an official id). Documentation ↗

Delayed sharing and webhooks

Do you want to use webhooks to be notified when a user shares their data?Without a webhook, you query the delayed sharing API at your own pace. Yes, I will use webhooks No webhook

Callback URLs (one per line)HTTPS required (localhost allowed in sandbox), no wildcard. Must match your application exactly.