In the initial plans for OS2valghalla 3.0 it was decided to use integrations to KOMBIT’s Serviceplatformen and Fælleskommunal Adgangsstyring for the following tasks:
Get CPR data using https://digitaliseringskataloget.dk/integration/sf1525
Send Digital Post using https://digitaliseringskataloget.dk/integration/sf1601
Access control and user rights for administrative users using FK Adgangsstyring https://digitaliseringskataloget.dk/l%C3%B8sninger/adgangsstyring-brugere
Bad experiences during the general election in November '22 has shown a need to reconsider these integrations. Would it be more wise to use other integrations or have backup plans in case Serviceplatformen or FK Adgangsstyring is down. Therefore knowledge has been gathered from KOMBIT and experienced users of Serviceplatformen.
Supplier knowledge
On a meeting with Brian Graversen (Digital Identity), Anne-Marie Mikkelsen and Dan Nobel possible integrations were discussed.
Brian has extensive knowledge of Serviceplatformen both as a consultant working for KOMBIT and as a user of Serviceplatformen.
CPR data
Brian has used https://digitaliseringskataloget.dk/integration/sf1520 for other products, finds it quick and even had a useful open source component written in .NET from OS2osfd: https://github.com/OS2sofd/middleware/tree/master/sofd-core-cpr-integration
It was also discussed getting a full copy of the CPR data from the each relevant municipality using https://digitaliseringskataloget.dk/integration/sf6002 and updating this data once a day or similar. This requires a license between each municipality and Serviceplatformen as a supplier can’t use SF6002 for themselves. Using SF1520 the hosting supplier can get their own license with Serviceplatformen.
In general Brian hasn’t experienced more downtime on SF1520 than other similar systems, but of course he suggests a logic handling possible timeouts on calls to Serviceplatformen.
Digital Post
In Brian’s view the only thing gained using https://digitaliseringskataloget.dk/integration/sf1601 instead of a direct integration to Digital Post, is that each municipality won’t have to setup OS2valghalla as a new system in Digital Post. Instead we just need a few keys to be able to send on behalf of each municipality.
On a side note each municipality pays for how much data they send through Digital Post but this is handled directly between Digitaliseringsstyrelsen and the municipality and costs the same regardless of which integration is used.
Serviceplatformen adds an extra layer between OS2valghalla and Digital Post and an extra place where errors can happen.
Brian didn’t have a clear suggestion for Digital Post.
Access control and user rights
It has been decided that both access control and user rights has to be handled outside OS2valghalla which means FK Adgangsstyring should be fully integrated. We talked about the possibility to use the IdM of each municipality instead of FK adgangsstyring, but Mogens didn’t think this would be the best solution as the requires more work setting up the integration in each Municipality.
We ended up agreeing on a back up to FK adgangsstyring as MitID/Nemlogin will be already integrated for the participants. This means we can have the ability to turn on MitID for administrative users if FX Adgangsstyring is down. Using CPR number as the identifier to match the user rights gained from FX Adgangsstyring.