This message serves as an important update to the information previously shared regarding the sunset of the Norwegian BankID Signing Service and the rollout of the new BankID signing solution. We have received an extension to continue using the current BankID Server Signing service until April 1, 2026. This means that the BankID Server will remain fully operational during this period, and all services will continue to function as they do today. This extension provides InGroupe’s customers with sufficient time to implement the necessary changes on their end and ensure a smooth transition to the new signing infrastructure.
BankID has informed us that non-qualified signing certificates will be issued for transitional use until the migration to the new eSign APIs is completed. During this interim period, such certificates will be temporarily issued via the new Stø certificate authority (CA). For you this means that BankID will produce Advanced Electronic Signatures (AES) using non-qualified certificates for such cases. It is important to note that today’s AES is issued with a qualified certificate.
Please review the following changes and actions required to ensure a smooth transition.
1. Modernized User Interfaces • BankID will discontinue support for iframe-based integrations: Customers currently using iframe must update their integrations. • SDO format will remain supported: IN Groupe will generate SDO documents, and customers may choose between SDO or PADES formats according to their needs.
2. New Certificate Infrastructure • BankID certificates will now be issued by Stø, replacing banks as the formal issuers. • This transition simplifies issuance and opens new opportunities, such as enabling BankID for individuals without a Norwegian bank account. • All BankID merchants will require new certificates. IN Groupe will manage the replacement process, although some customer involvement may be necessary. • The Norwegian National Identity Number (NNIN) will be included in the public certificate as a custom extension, using the following Object Identifier (OID): 2.16.578.1.61.2.4
3. Migration to new BankID signing services • A new BankID must be issued to utilize the new BankID signing service from Stø. • New client credentials must be created, ref the above issuance of a new BankID. This BankID will have a related client that must be correctly configured by Stø upon request from IN Groupe. If a new certificate is issued, merchants will notice that their signature/seal in SDO documents is associated with a different certificate.
4. Ordering New BankIDs from Stø • Some customers will need to new BankIDs, IN Groupe will assist customers in this. • IN Groupe will contact individual customers as needed. • Further instructions for other customer groups will be shared shortly.
We would like to emphasize that these changes are being implemented in line with the official guidelines and decisions issued by Stø, and as such, they fall outside of IN Groupe’s direct control. Nevertheless, please rest assured that we are fully committed to supporting you throughout this transition and will take every possible step to ensure a smooth and seamless experience.