RAR SSO
External identity route for authorized journeys; bind the result to subject, application and session.
Continue in the ecosystem
Trusted Records ecosystem
Identity, permitted shared information and signing transactions connect to records under explicit purpose and authority.
Read detailsAPI authentication and authorization
OAuth scopes govern API access; tenant/project and records policy still govern business authorization.
Read detailsPrivacy and records data
Separate website information from owner-provided records data; establish purposes, grounds and roles.
Read detailsMobile-ID capability and service scope
Mobile-ID publishes RAR VNeID SSO/ShareInfo connectivity. Trusted Records deployment scope, authorization and contracts are not verified in the package. Exchange only permitted attributes with purpose/grounds and retention controls; SSO does not sign records.
Mobile-ID ↗Connection scope
Trusted Records RAR SSO scope requires an approved contract and deployment authorization. This page describes an intended design, not production connectivity.
Business journey
Start session → receive trusted-source result → validate validity/context → map subject → authorize record action.
Exceptions and revocation
Decline, timeout, expiry or subject mismatch: do not grant an authorized session; retain minimal transaction references and reasons for reconciliation.
Minimum evidence
Retain subject references, organization/project, purpose, session/transaction, validity, decision and associated records. Do not log tokens, secrets or unnecessary shared attributes.
Continue the workflow
Two journeys, one records lifecycle
Connect paper and born-digital records through persistent identifiers, policies and evidence.
Read detailsIntegration quickstart
Exercise ingest → job tracking → registration → verification with synthetic data.
Read detailsIntegrity, provenance and evidence
Each evidence type answers a different question; hashes, timestamps and approvals are not interchangeable.
Read detailsStart with a verifiable scope.
Agree record classes, quality criteria, permissions and evidence before scaling.
Plan assessment